CVE-2021-37003

CVE-2021-37003 is a Huawei HarmonyOS kernel-level vulnerability caused by improper input validation . Multiple sources (NVD, CNVD, Red Hat, CNNVD, CVE list) describe it as allowing kernel crashes. Exploitation details are not provided in the documents. Affected product is HarmonyOS; risk is noted...

CVE-2021-37003

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash...

CVE-2021-37008

CVE-2021-37008 describes an Improper Input Validation vulnerability in Huawei HarmonyOS (Huawei smartphone). The connected records identify the root cause as input validation issues that can lead to a kernel crash when exploited. The exact affected components, versions, exploit details, and remed...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Tutor LMS, which stems from a lack of prope...

CVE-2021-33488

chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a development-related hook...

CVE-2021-33488

chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a development-related hook...

CVE-2021-33488

OX App Suite 7.10.5 chat component has an input validation issue that can redirect a user to a rogue OX Chat server via a development-related hook. Affected product: OX App Suite (and OX Documents’s backend chat-related flow). Root cause: improper input validation in chat-related handling. Impact...

CVE-2021-36321

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending specially crafted data to trigger a denial of service...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The vulnerability exists due to an improper input validation allows an authenticated user to potentially enable a denial of service via local access...

CVE-2021-0199

Improper input validation in the firmware for the IntelR Ethernet Network Controller E810 before version 1.6.0.6 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2021-0186

Improper input validation in the IntelR SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access...

CVE-2021-0079

Improper input validation in software for some IntelR PROSet/Wireless WiFi and KillerTM WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2021-0078

Improper input validation in software for some IntelR PROSet/Wireless WiFi and KillerTM WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access...

CVE-2021-0079

Improper input validation in software for some IntelR PROSet/Wireless WiFi and KillerTM WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2021-0078

CVE-2021-0078 involves improper input validation in software for Intel® PROSet/Wireless WiFi and Killer™ WiFi on Windows 10. The Red Hat and Intel advisories corroborate that an unauthenticated user could potentially cause denial of service or information disclosure via adjacent access. The vulne...

CVE-2021-0063

Improper input validation in firmware for some IntelR PROSet/Wireless WiFi and KillerTM WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

freerdp, libwinpr security update

CentOS Errata and Security Advisory CESA-2021:4619 An update for freerdp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

GHSA-H352-G5VW-3926 Improper Input Validation in fruity

Methods of NSString for conversion to a string may return a partial result. Since they call CStr::fromptr on a pointer to the string buffer, the string is terminated at the first null byte, which might not be the end of the string. In addition to the vulnerable functions listed for this issue, th...

Mitsubishi Electric GOT products

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: GOT2000 series, GOT SIMPLE series, GT SoftGOT2000 Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow the...

CVE-2021-36324

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...