9759 matches found
VulnCheck KEV: CVE-2019-0541
Microsoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability...
Trend Micro Multiple Products Improper Input Validation Vulnerability
Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files...
CVE-2021-20705
The CVE-2021-20705 entry concerns NEC CLUSTERPRO/EXPRESSCLUSTER X WebManager with an input-validation vulnerability that allows a remote attacker to upload arbitrary files via the network. Affected products include CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and ear...
Adobe Prelude < 22.0 Multiple Vulnerabilities (APSB21-96)
The version of Adobe Prelude installed on the remote Windows host is prior to 22.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-96 advisory. - Adobe Prelude version 10.1 and earlier are affected by a memory corruption vulnerability. An unauthenticated attack...
CVE-2021-30831
An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted font may result in the disclosure of process memory...
CVE-2021-22467
A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to read at any address...
CVE-2021-22452
A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to read at any address...
CVE-2021-22453
A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash...
CVE-2021-22453
CVE-2021-22453 is described across multiple sources as an Improper Input Validation issue in a HarmonyOS component. The Red Hat/EUVD/CNVD variants reiterate a local-exploit scenario where an attacker can trigger crashes in nearby processes by sending crafted input, with Bluetooth protocol data ci...
CVE-2021-22467
The CVE-2021-22467 entry concerns HarmonyOS, describing an improper input validation vulnerability in a system component. This flaw can permit a local attacker to read arbitrary memory addresses, indicating a confidentiality impact without integrity/availability compromise. The root cause, as sta...
CVE-2021-22452
CVE-2021-22452 affects HarmonyOS, specifically the bl2_iomcu_resource_cfg function. The connected sources describe an improper input validation vulnerability that enables a local attacker to read arbitrary memory addresses. The impact is documented as read access to any address; no remote code ex...
NewStart CGSL CORE 5.04 / MAIN 5.04 : squid Vulnerability (NS-SA-2021-0110)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has squid packages installed that are affected by a vulnerability: - An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to perform HTTP Request...
CVE-2021-1117
Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where an attacker through specific configuration and with local unprivileged system access may cause improper input validation, which may lead to denial of service...
CVE-2020-7867
An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the file from agent with privilege of...
CVE-2020-7867 Helpu arbitrary file creation vulnerability
An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the file from agent with privilege of...
CVE-2020-7867
CVE-2020-7867 describes an improper input validation vulnerability in the Helpu solution, affecting the viewer component that receives files from an agent running with administrator privileges. The underlying issue allows a local attacker to create arbitrary files and potentially execute code in...
Improper Input Validation
Java SE is vulnerable to improper input validation. an attacker can gain access to sensitive information through the JSSE component in the oracle GraalVM enterprise edition...
Improper Input Validation
Java SE is vulnerable to Improper Input Validation. An attacker can perform service disruption through the Hotspot component in the oracle GraalVM enterprise edition...
Improper Input Validation
Java SE is vulnerable to improper input validation. An attacker can perform service disruption through the JSSE component in the oracle GraalVM enterprise edition...