11350 matches found
CVE-2025-33043
CVE-2025-33043 is an SMM/AMI AptioV BIOS vulnerability involving improper input validation in BIOS code, enabling local attacker to redirect memory references into SMRAM and potentially execute code in the System Management Mode. The impact is elevation of privileges with the ability to modify fi...
CVE-2025-33043 SMM buffer Integrity
APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can potentially impact of integrity...
OS Command Injection
LLama-Index CLI is vulnerable to OS Command Injection. The vulnerability is due to improper input handling due to unsanitized use of the --files argument passed directly into os.system, allowing arbitrary command execution...
Deserialization Of Untrusted Data
Apache InLong is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to improper input validation during deserialization, which allows an attacker to exploit URL encoding and backspace characters to bypass security checks and perform a JDBC injection attack...
The vulnerability of Nomad application orchestrators, related to incorrect input data validation, allows attackers to trigger service failures.
The vulnerability of Nomad application orchestrators is related to improper validation of input data. Exploiting this vulnerability can allow an attacker who operates remotely to cause service failures...
PT-2025-23166 · Aptiov · Aptiov
Name of the Vulnerable Software and Affected Versions: APTIOV affected versions not specified Description: The issue is related to an Improper Input Validation in the BIOS, which can be exploited locally by an attacker. This could potentially impact the integrity of the system. Recommendations: A...
USN-7537-2: net-tools regression
USN-7537-1 fixed a vulnerability in net-tools that caused a regression. This update fixes the problem. Original advisory details: It was discovered that net-tools incorrectly handled certain inputs. An attacker could possible use this issue to cause a crash or execute arbitrary code...
Out-of-Bounds Read
libassimp.so is vulnerable to Out-of-bounds Read. The vulnerability is due to improper input validation due to insufficient bounds checking in the LWOImporter::CountVertsAndFacesLWO2 function, which may allow local attackers to read unintended memory content...
Out-of-Bounds-Read
libassimp.so is vulnerable to out-of-bounds read. The vulnerability is due to improper input handling in the MDLImporter::InternReadFileQuake1 function of MDLLoader.cpp, which allows an attacker to read memory beyond buffer limits...
CVE-2024-47090
Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS...
Out-of-Bounds Read
libassimp.so is vulnerable to Out-of-Bounds Read. The vulnerability is due to improper input validation due to a lack of bounds checking on the pcVerts argument in the MDCImporter::InternReadFile function, which can lead to reading memory outside the allocated buffer...
Volunteer Sign Up Sheets 跨站脚本漏洞
Volunteer Sign Up Sheets is an application by Stephen Sherrard, an individual developer. A cross-site scripting vulnerability exists in Volunteer Sign Up Sheets versions prior to 5.5.5, which stems from improper input neutralization and could lead to stored cross-site scripting...
NagVis 安全漏洞
NagVis is a program from NagVis open source. Used to visualize your chosen monitoring core data in a user-friendly way. A security vulnerability exists in Nagvis versions prior to 1.9.47, which stems from improper input neutralization and could lead to livestatus injection...
Denial Of Service (DoS)
github.com/gofiber/fiber/v2 is vulnerable to Denial Of Service DoS. The vulnerability is due to improper input handling in the Ctx.BodyParser method panicking when processing user-supplied input with negative slice indices instead of returning an error...
Directory Traversal
setuptools is vulnerable to Directory Traversal. The vulnerability is due to improper input validation in the PackageIndex component allowing arbitrary file writes to the filesystem, potentially leading to remote code execution...
CVE-2025-20250
A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A...
CVE-2025-24746
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniel Iser Popup Maker popup-maker allows Stored XSS.This issue affects Popup Maker: from n/a through = 1.20.2...
CVE-2025-23997
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tamara Solution Tamara Checkout tamara-checkout allows Stored XSS.This issue affects Tamara Checkout: from n/a through 1.9.9.1...
CVE-2024-9286
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TRtek Software Distant Education Platform allows SQL Injection, Parameter Injection. This issue affects Distant Education Platform: before 3.2024.11...