Improper Input Validation in kdcproxy

python-kdcproxy before 0.3.2 allows remote attackers to cause a denial of service via a large POST request...

GHSA-J7C4-2XJ8-WM7R Improper Input Validation in kdcproxy

python-kdcproxy before 0.3.2 allows remote attackers to cause a denial of service via a large POST request...

Yi Technology Home Camera 27US Firmware Downgrade Vulnerability

Summary An exploitable firmware downgrade vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted file can cause a logic flaw, resulting in a firmware downgrade. An attacker can insert an SD card to trigger this vulnerability. Tested Versions...

CVE-2018-11884

Improper input validation leads to buffer overflow while processing network list offload command in WLAN function in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660...

CVE-2018-11873

Improper input validation leads to buffer overwrite in the WLAN function that handles WLAN roam buffer in Snapdragon Mobile in version SD 845...

Input validation

Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 845, SD 850, SDA660...

Input validation

Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, SD 845, SD 850...

CVE-2018-11856

Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, SD 845, SD 850...

CVE-2018-11857

Improper input validation in WLAN encrypt/decrypt module can lead to a buffer copy in Snapdragon Mobile in version SD 835, SD 845, SD 850...

CVE-2018-11856

CVE-2018-11856 is a Qualcomm Snapdragon vulnerability describing improper input validation that leads to a buffer overwrite in the WLAN/WMI handling function on Snapdragon Mobile platforms (SD 835, 845, 850). The issue is triggered within the WLAN component during processing of WMI commands. The ...

CVE-2018-11873

CVE-2018-11873 affects Qualcomm Snapdragon Mobile SD 845 WLAN roam-buffer handling. The issue arises from improper input validation, enabling a buffer overwrite in the WLAN component. CVSS data in the NVD indicates local access, low attack complexity, no authentication, and high impact on confide...

CVE-2018-11872

CVE-2018-11872 affects Qualcomm Snapdragon Mobile WLAN code that processes WMI commands. The root cause is improper input validation, leading to a buffer overwrite in the WLAN function. Affected devices are Snapdragon platforms SD 845, SD 850, and SDA660. The available connected sources corrobora...

CVE-2018-11873

Improper input validation leads to buffer overwrite in the WLAN function that handles WLAN roam buffer in Snapdragon Mobile in version SD 845...

CVE-2018-11857

CVE-2018-11857 involves improper input validation in the WLAN encrypt/decrypt module in Qualcomm Snapdragon Mobile, causing a buffer copy vulnerability. Affected are SD 835, 845, and 850-based devices. The entry indicates local attack potential with high impact to confidentiality, integrity, and ...

CVE-2018-5914

Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile, Snapdragon Wear version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660...

Input validation

Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile, Snapdragon Wear version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660...

CVE-2017-18171

Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD...

Improper Input Validation

Fastjson allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is mishandled in AjaxApplication.java...

GHSA-V596-FWHQ-8X48 Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core

Spring Security Spring Security 4.1.x before 4.1.5, 4.2.x before 4.2.4, and 5.0.x before 5.0.1; and Spring Framework 4.3.x before 4.3.14 and 5.0.x before 5.0.3 does not consider URL path parameters when processing security constraints. By adding a URL path parameter with special encodings, an...

GHSA-M956-FRF4-M2WR Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems

Ansible before versions 2.1.4.0, 2.2.1.0 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to...