18352 matches found
ROS-20241127-01
A vulnerability in the bna component of the Linux operating system kernel is related to out-of-bounds read errors in the bnaddebugfswriteregrd and bnaddebugfswriteregwr functions in the drivers/net/ethernet/brocade/bna/bnaddebugfs.c. Exploitation of the vulnerability could allow an attacker to...
kernel: improper input validation may lead to privilege escalation
An out-of-bounds OOB memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special privilege to crash the system or leak internal information...
CVE-2017-15832: Improper Input Validation
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW...
CVE-2024-22117: Improper Input Validation
When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...
CVE-2024-52337: Improper Input Validation
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...
RHEL 9 : buildah (RHSA-2024:9926)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9926 advisory. The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a...
CVE-2024-11234: Improper Input Validation
In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, when using streams with configured proxy and "requestfulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests...
CVE-2021-38118
Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000...
CVE-2021-38118
Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000...
CVE-2021-38118 Possible Local Privilege Escalation Vulnerability in OpenText iManager
Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000...
CVE-2021-30299 Improper Input Validation in Audio
Possible out of bound access in audio module due to lack of validation of user provided input...
PT-2024-10986 · Opentext · Opentext Imanager
Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.4.0000 Description: A possible improper input validation issue has been discovered in the iManager component. Recommendations: For OpenText iManager version 3.2.4.0000, at the moment, there is no information abou...
CVE-2021-38118: Execution with Unnecessary Privileges
Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000...
CVE-2024-52309: Improper Input Validation
SFTPGo is a full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob. One powerful feature of SFTPGo is the ability to have the EventManager execute scripts or run applications in response to certain events. This feature is very common in...
CVE-2018-9480
In btahdgetreportact of btahdact.cc, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-11404
CVE-2024-11404 : Affected software is Django Filer (used with Django CMS). The vulnerability is an Unrestricted Upload of File with Dangerous Type and Stored XSS caused by input data manipulation and improper neutralization of script-related HTML tags. Impact is stored XSS with potential data han...
CVE-2018-9440
In parse of M3UParser.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2018-9412
In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2018-9412
In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation...