CVE-2025-20333: Buffer Copy without Checking Size of Input

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper...

Tenda AC6 Improper Input Validation Vulnerability

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps. The Tenda AC6 suffers from an improper input validation vulnerability that stems from improper handling of the funcname, funcpara1, and funcpara2 parameters in the...

CVE-2025-52907

The TOTOLINK X6000R wireless router (versions through V9.4.0cu.1360_B20241207 ) is vulnerable to Improper Input Validation in its microprogramming software. The root cause is a failure to adequately verify the legitimacy of user-supplied input, which allows a remote attacker to perform Command In...

CVE-2025-47314 Improper Input Validation in Automotive Software platform based on QNX

Memory corruption while processing data sent by FE driver...

CVE-2025-47314

The CVE-2025-47314 issue affects an Automotive Software platform based on QNX used in Qualcomm chipsets. The root cause reported is memory corruption encountered when processing data sent by the FE driver. The vulnerability is described with a CVSSv3.1 base score of 7.8 (HIGH) and an attack vecto...

CVE-2025-47314 Improper Input Validation in Automotive Software platform based on QNX

Memory corruption while processing data sent by FE driver...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via the process handling incoming requests. An attacker can cause the service to become unresponsive by sending specially crafted input. Remediation Upgrade org.apache.iotdb:iotdb-core to version 2.0.5 or highe...

Cisco IOS 安全漏洞

Cisco IOS is a set of operating systems developed by the American company Cisco for its network devices. A security vulnerability exists in Cisco IOS that stems from improper input validation and could lead to a denial of service attack...

The vulnerability of the Go programming language, related to improper validation of input data, allows attackers to exploit their privileges.

The vulnerability of the Go programming language is related to improper validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain increased privileges...

PT-2025-44357

Name of the Vulnerable Software and Affected Versions Drupal Reverse Proxy Header versions prior to 1.1.2 Description An improper validation of consistency within input exists in Drupal Reverse Proxy Header, allowing manipulation of user-controlled variables. Recommendations Update to version 1.1...

CVE-2025-20327: Improper Validation of Specified Type of Input

A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a...

CVE-2025-47314: Improper Input Validation

Memory corruption while processing data sent by FE driver...

CVE-2025-52907: Improper Input Validation

Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.1360B20241207...

The vulnerability of the Go programming language, related to improper validation of input data, allows attackers to circumvent existing security restrictions.

The vulnerability of the Go programming language is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions remotely...

CVE-2024-21935

Improper input validation in Satellite Management Controller SMC may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root directory, potentially resulting in data corruption...

CVE-2024-21927

Improper input validation in Satellite Management Controller SMC may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service processes like OpenBMC to crash and reset, potentially resulting in denial of service...

CVE-2025-52905

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360B20241207...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router supporting Wi-Fi 6 technology from China's Gion Electronics TOTOLINK, focusing on high concurrent connections and dual-band transmission capabilities. The TOTOLINK X6000R suffers from an improper input validation vulnerability, which can be exploited by...

CVE-2025-52905: Improper Input Validation

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360B20241207...

CVE-2024-21935: Improper Handling of Unexpected Data Type

Improper input validation in Satellite Management Controller SMC may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root directory, potentially resulting in data corruption...