CVE-2024-9404: Improper Validation of Specified Type of Input

This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxacmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing...

CVE-2024-11985: Improper Input Validation

An improper input validation vulnerability leads to device crashes in certain ASUS router models. Refer to the '12/03/2024 ASUS Router Improper Input Validation' section on the ASUS Security Advisory for more information...

XML External Entity (XXE) Injection

org.powertac:server-interface is vulnerable to XML External Entity XXE Injection. The vulnerability is due to improper input validation in the DocumentBuilderFactory component, allowing attackers to access sensitive information or execute arbitrary code via crafted XML entities...

CVE-2024-49412

Improper input validation in Settings prior to SMR Dec-2024 Release 1 allows local attackers to broadcast signal for discovering Bluetooth on Galaxy Watch...

CVE-2024-49412

Improper input validation in Settings prior to SMR Dec-2024 Release 1 allows local attackers to broadcast signal for discovering Bluetooth on Galaxy Watch...

CVE-2024-49412

CVE-2024-49412 affects Samsung Galaxy Watch where the Settings component allows a local attacker to abuse improper input validation to broadcast a Bluetooth discovery signal. The public details identify the root cause as input validation issues in Settings prior to SMR Dec-2024 Release 1, enablin...

CVE-2024-52815: Improper Input Validation

Synapse is an open-source Matrix homeserver. Synapse versions before 1.120.1 fail to properly validate invites received over federation. This vulnerability allows a malicious server to send a specially crafted invite that disrupts the invited user's /sync functionality. Synapse 1.120.1 rejects su...

CVE-2024-49412: Undefined Security Weakness

Improper input validation in Settings prior to SMR Dec-2024 Release 1 allows local attackers to broadcast signal for discovering Bluetooth on Galaxy Watch...

CVE-2018-9431

In OSUInfo of OSUInfo.java, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9431

In OSUInfo of OSUInfo.java, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9380

In l2clccprocpdu of l2cfcr.cc, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2018-9380

In l2clccprocpdu of l2cfcr.cc, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

PT-2024-10653 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write due to improper input validation in the l2c lcc proc pdu function of l2c fcr.cc. This could lead ...

PT-2024-10691 · Osuinfo · Osuinfo

Name of the Vulnerable Software and Affected Versions: OSUInfo affected versions not specified Description: The issue is related to improper input validation in OSUInfo.java, which could lead to a local escalation of privilege without requiring additional execution privileges or user interaction...

CVE-2024-43052: Improper Input Validation

Memory corruption while processing API calls to NPU with invalid input...

CVE-2024-20138: Out-of-bounds Read

In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998291; Issue ID: MSV-1604...

CVE-2018-9431: Incorrect Default Permissions

In OSUInfo of OSUInfo.java, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-334777015

In prepareresponselocked of lwistransaction.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Cisco NX-OS Improper Input Validation (CVE-2018-0456)

A vulnerability in the Simple Network Management Protocol SNMP input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application of an affected device to restart unexpectedly. The vulnerability is due to improper validation of SNMP protocol...

Directory Traversal

gogs.io/gogs is vulnerable to Directory Traversal. The vulnerability is due to improper input validation in the editFilePost function of internal/route/repo/editor.go, allowing attackers to access unintended directories...