7535 matches found
CVE-2023-0636
CVE-2023-0636 : ABB ASPECT family (ASPECT-Enterprise, NEXUS Series, MATRIX Series) suffers an improper input validation that enables command injection and remote code execution. Affected versions: ASPECT-Enterprise 3.0.0–3.07.0; NEXUS Series 3.0.0–3.07.0; MATRIX Series 3.0.0–3.07.1. Remediation: ...
Schweitzer Engineering Laboratories RTAC Improper Input Validation (CVE-2023-31162)
An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to arbitrarily alter the content of a configuration file. See SEL Service Bulletin dated 2022-11-15 for more...
PUB-A-254445952
In btmblereadremotefeaturescomplete of btmblegap.cc, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if the firmware were compromised with System execution privileges needed. User interaction is not needed for exploitation...
ASB-A-205460459
In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connected VPN due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
PUB-A-262246082
In startWpsPbcInternal of staiface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
PUB-A-236688764
In onremoveisodatapath of btmisoimpl.h, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-264540759
In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure from the modem with System execution privileges needed. User interaction is not needed for exploitation...
PUB-A-262245254
In setCountryCodeInternal of staiface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
ASB-A-268193777
In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-245915315
In BTAGATTSHandleValueIndication of btagattsapi.cc, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Apache Batik vulnerabilities (USN-6117-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6117-1 advisory. It was discovered that Apache Batik incorrectly handled certain inputs. An attacker could possibly use this to perfor...
CVE-2023-0779 net: shell: Improper input validation
At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device’s memory layout, further exploitation is possible...
CVE-2023-0779 net: shell: Improper input validation
At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device’s memory layout, further exploitation is possible...
CVE-2023-2942
OpenEMR/OpenEMR before v7.0.1 is affected by an improper input validation flaw in the application that can impact confidentiality and integrity. Multiple sources concur on the issue, with CVSS 3.1/3.0 base scores around 8.1 (HIGH) and a network-based, low–complexity vector. The problem is tied to...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-2868 Barracuda Networks ESG Appliance Improper Input Validation Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber acto...
Barracuda Networks ESG Appliance Improper Input Validation Vulnerability
Barracuda Email Security Gateway ESG appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection...
Improper Input Validation
github.com/kubernetes/ingress-nginx is vulnerable to Improper Input Validation. The vulnerability exists when a newline character is used in spec.rules.http.paths.path which allows an attacker to create or update ingress objects and gain access to sensitive information...
K000134781: Multiple Intel Server Board BMC vulnerabilities
Security Advisory Description CVE-2023-22661 Buffer overflow in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access. CVE-2023-22297 Access of memory location after end of buffer in some IntelR Server Board BMC...
Rockwell ArmorStart Improper Input Validation (CVE-2023-29027)
A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause...
Rockwell ArmorStart Improper Input Validation (CVE-2023-29028)
A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause...