CVE-2024-21544

Versions of the package spatie/browsershot before 5.0.1 are vulnerable to Improper Input Validation due to improper URL validation in the setUrl method. An attacker can exploit this vulnerability by using leading whitespace %20 before the file:// protocol, resulting in Local File Inclusion, which...

PT-2024-18956

Name of the Vulnerable Software and Affected Versions spatie/browsershot versions prior to 5.0.1 Description The issue is related to improper input validation due to incorrect URL validation through the setUrl method. An attacker can exploit this by using leading whitespace %20 before the file://...

CVE-2024-21544: Improper Input Validation

Versions of the package spatie/browsershot before 5.0.1 are vulnerable to Improper Input Validation due to improper URL validation in the setUrl method. An attacker can exploit this vulnerability by using leading whitespace %20 before the file:// protocol, resulting in Local File Inclusion, which...

SUSE SLES15 Security Update : buildah (SUSE-SU-2024:4303-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4303-1 advisory. Security issues fixed: - CVE-2024-9675: cache arbitrary directory mount bsc1231499 - CVE-2024-9407: Improper Input Validation in...

National Instruments LabVIEW < 2024 Q3 Patch 2 Multiple Vulnerabilities

The version of National Instruments LabVIEW installed on the remote host is prior to 2022 Q3 Patch 4, 2023 Q3 Patch 5, or 2024 Q3 Patch 2. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024Q3P2 advisory. - An out of bounds read due to improper input validation in...

CVE-2024-47238

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

CVE-2024-47238

CVE-2024-47238 affects Dell Client Platform BIOS. Vulnerability: Improper Input Validation in an externally developed component. Attack scenario: a high-privilege attacker with local access could potentially execute arbitrary code. Documents indicate the issue involves a local attacker, with high...

CVE-2024-47238

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

PT-2024-35478 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue is related to improper input validation, which could cause the GUI to not load or stop working for an authenticated user. Recommendations: For IBM InfoSphere Information...

CVE-2024-52901: Improper Validation of Specified Quantity in Input

IBM InfoSphere Information Server 11.7 could allow an authenticated user to GUI to not load or stop working due to improper input validation...

CVE-2024-47238: Improper Input Validation

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

CVE-2024-54101: Improper Input Validation

Denial of service DoS vulnerability in the installation module Impact: Successful exploitation of this vulnerability will affect availability...

PT-2024-32488

Name of the Vulnerable Software and Affected Versions Dell Client Platform BIOS affected versions not specified Description The issue is related to an Improper Input Validation vulnerability in a component developed externally. This could allow an attacker with high privileges and local access to...

CVE-2024-12401: Improper Input Validation

A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large amounts of CPU in the cert-manager controller pod to effectively create a denial-of-service DoS vector for the cert-manag...

Improper Input Validation

Overview spatie/browsershot is a library for converting a webpage to an image or pdf using headless Chrome. Affected versions of this package are vulnerable to Improper Input Validation due to improper URL validation in the setUrl method. An attacker can exploit this vulnerability by using leadin...

Improper Input Validation

Overview spatie/browsershot is a library for converting a webpage to an image or pdf using headless Chrome. Affected versions of this package are vulnerable to Improper Input Validation in the setHtml function, invoked by Browsershot::html, which can be bypassed by omitting the slashes in the fil...

CVE-2024-11737

CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentiality, integrity of the controller when an unauthenticated crafted Modbus packet is sent to the device...

CVE-2024-11737: Improper Input Validation

CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentiality, integrity of the controller when an unauthenticated crafted Modbus packet is sent to the device...

Improper Input Validation

Overview sigstore is an A tool for signing Python package distributions Affected versions of this package are vulnerable to Improper Input Validation due to the integration time verification process. An attacker can induce a Denial of Service by modifying the integration timestamp within a bundle...

CVE-2024-52831

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitatio...