18324 matches found
PT-2025-20365 · Halo · Halo
Name of the Vulnerable Software and Affected Versions: Halo versions up to 2.174.101 Halo versions 2.175.1 through 2.184.21 Description: The issue is related to improper input validation, specifically with the returnUrl parameter in Account Security Settings. This lack of validation allows...
CVE-2025-45797
TOTOlink A950RG V4.1.2cu.5204B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cstemodules/system.so...
Improper Input Validation
Overview alextselegidis/easyappointments is a powerful Open Source Appointment Scheduler that can be installed on your server. Affected versions of this package are vulnerable to Improper Input Validation via register function, an attacker has the ability to schedule appointments with exceptional...
CVE-2025-20969
Improper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows local attackers to access data within Samsung Gallery...
CVE-2025-20971
Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung Flow...
CVE-2025-20969
Improper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows local attackers to access data within Samsung Gallery...
Improper Input Validation
org.apache.tomcat, tomcat-coyote is vulnerable to Improper Input Validation. The vulnerability is due to incorrect error handling of invalid HTTP priority headers, which causes incomplete clean-up of failed requests and a memory leak, allowing an attacker to send many malformed requests to exhaus...
SAMSUNG Flow 安全漏洞
SAMSUNG Flow is a software product from the South Korean company Samsung SAMSUNG. It is used to enable a seamless, secure, and connected experience on devices. A security vulnerability exists in SAMSUNG Flow versions prior to 4.9.17.6, which stems from improper input validation and could allow a...
CVE-2025-20197: Improper Input Validation
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...
CVE-2025-20969: Undefined Security Weakness
Improper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows local attackers to access data within Samsung Gallery...
SAMSUNG Gallery 安全漏洞
SAMSUNG Gallery is an application from the South Korean company Samsung SAMSUNG. The best image and video viewing application for Galaxy users. SAMSUNG Gallery suffers from a security vulnerability that stems from improper input validation and could lead to a local attacker accessing internal dat...
CVE-2025-20971: Undefined Security Weakness
Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung Flow...
CVE-2025-21460 Improper Input Validation in Automotive Software platform based on QNX
Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously...
CVE-2024-49845 Improper Input Validation in HLOS
Memory corruption during the FRS UDS generation process...
CVE-2024-49845 Improper Input Validation in HLOS
Memory corruption during the FRS UDS generation process...
CVE-2024-45579 Improper Input Validation in Camera Driver
Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check...
CVE-2024-45579 Improper Input Validation in Camera Driver
Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check...
CVE-2024-45577 Improper Input Validation in Camera Driver
Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information...
Regular Expression Denial Of Service (ReDoS)
org.apereo.cas, cas-server-core-configuration-metadata-repository is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to improper processing of the "Name" argument without input validation, which allows remote attackers to trigger excessive backtracking and degra...