K63597327: Python Flask vulnerability CVE-2018-1000656

Security Advisory Description The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON...

K12265377: Intel AMT / ISM multiple vulnerabilities

Security Advisory Description CVE-2020-0594 Out-of-bounds read in IPv6 subsystem in IntelR AMT and IntelR ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access. CVE-2020-0595 Use after free in...

CVE-2023-22239

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-21574

Photoshop version 23.5.3 and earlier, 24.1 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Input validation

FrameMaker 2020 Update 4 and earlier, 2022 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Improper Input Validation

Overview github.com/gin-gonic/gin is a package that implements a HTTP web framework called gin. Affected versions of this package are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted request via the X-Forwarded-Prefix header, potentially leading to cache...

CVE-2023-21621 Adobe FrameMaker Improper Input Validation Remote Code Execution Vulnerability

FrameMaker 2020 Update 4 and earlier, 2022 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-22239

CVE-2023-22239 (Adobe After Effects) affects After Effects versions 23.1 and earlier, and 22.6.3 and earlier. It is an Improper Input Validation vulnerability that could allow arbitrary code execution in the context of the current user, requiring user interaction to open a malicious file. Affecte...

CVE-2023-22239 Adobe After Effects Improper Input Validation Remote Code Execution Vulnerability

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-21574

Adobe Photoshop is affected by an Improper Input Validation vulnerability (CVE-2023-21574) that can lead to arbitrary code execution in the context of the current user. Affected versions are Photoshop 23.5.3 and earlier, and 24.1 and earlier. The issue requires user interaction to exploit (victim...

CVE-2023-21621

CVE-2023-21621 affects Adobe FrameMaker: FrameMaker 2020 Update 4 and earlier, and 2022 and earlier, are vulnerable to an Improper Input Validation flaw that could allow arbitrary code execution in the user’s context. Exploitation requires a user to open a malicious file. The issue is rated CVSSv...

CVE-2023-22228

Adobe Bridge is affected by CVE-2023-22228: an Improper Input Validation vulnerability that could allow arbitrary code execution in the context of the current user. Affected versions are 12.0.3 (and earlier) and 13.0.1 (and earlier). Exploitation requires user interaction, specifically the victim...

CVE-2022-33964

Improper input validation in the IntelR SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-29494

Improper input validation in firmware for OpenBMC in some IntelR platforms before versions egs-0.91-179 and bhs-04-45 may allow an authenticated user to potentially enable denial of service via network access...

CVE-2022-33964

Improper input validation in the IntelR SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Adobe FrameMaker 2020 < 16.0.5 (2020.0.5) / Adobe FrameMaker 2022 < 17.0.1 (2022.0.1) Multiple Vulnerabilities (APSB23-06)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2020 16.0.5 / Adobe FrameMaker 2022 17.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-06 advisory. - FrameMaker 2020 Update 4 and earlier, 2022 and earlier ar...

SUSE CVE-2018-12479

A Improper Input Validation vulnerability in Open Build Service allows remote attackers to cause DoS by specifying crafted request IDs. Affected releases are openSUSE Open Build Service: versions prior to 01b015ca2a320afc4fae823465d1e72da8bd60df...

SUSE CVE-2018-12478

A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system where the service runs. Affected releases are openSUSE Open Build Service: status of is unknown...

SUSE CVE-2018-1000205

U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality...

SUSE CVE-2018-1000656

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...