11634 matches found
Softmed SelfPatron SQL注入漏洞
Softmed SelfPatron is an application from Softmed, Inc. An SQL injection vulnerability exists in versions prior to Softmed SelfPatron 2.0, which stems from improper neutralization of special elements...
Gitea Input Validation Error Vulnerability (CNVD-2023-60472)
Gitea is a lightweight Go-based git service developed by the Gitea community. An input validation error vulnerability exists in Gitea versions prior to 1.19.4, which stems from improper input validation of the program. An attacker can exploit this vulnerability to obtain sensitive information...
CVE-2023-30665
Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds read...
CVE-2023-30666
Improper input validation vulnerability in DoOemImeiSetPreconfig in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds write...
CVE-2023-30664
Improper input validation vulnerability in RegisteredMSISDN prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...
CVE-2023-30658
Improper input validation vulnerability in DataProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...
CVE-2023-30659
Improper input validation vulnerability in Transaction prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...
CVE-2023-30655
Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...
CVE-2023-30657
Improper input validation vulnerability in EnhancedAttestationResult prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...
Input validation
Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...
CVE-2023-30666
Improper input validation vulnerability in DoOemImeiSetPreconfig in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds write...
CVE-2023-30666
The CVE-2023-30666 issue affects libsec-ril and its DoOemImeiSetPreconfig function, with an improper input validation that enables a local attacker to cause an Out-Of-Bounds write. Affected software is the Samsung mobile stack using libsec-ril prior to SMR Jul-2023 Release 1. Impact is localized ...
CVE-2023-30665
CVE-2023-30665 describes an improper input validation vulnerability in OnOemServiceMode within the libsec-ril component, leading to a local out-of-bounds read. Reported as a Samsung mobile/SR patch issue (SMR Jul-2023 Release 1), with exploitation requiring local access and low privileges. Public...
CVE-2023-30665
Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds read...
CVE-2023-30665
Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds read...
CVE-2023-30664
CVE-2023-30664 is an improper input validation vulnerability in Samsung Mobile devices, originating from the RegisteredMSISDN module in the SMR Jul-2023 Release 1. It enables local attackers to launch privileged activities. The issue is tied to Samsung’s patch cycle, with remediation provided in ...
CVE-2023-30664
Improper input validation vulnerability in RegisteredMSISDN prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...
CVE-2023-30663
CVE-2023-30663 describes an improper input validation vulnerability in the Samsung/libsec-ril component, specifically the OemPersonalizationSetLock function, which may allow a local attacker to perform an out-of-bounds write. The issue is tied to Samsung Mobile devices running the affected SMR Ju...
CVE-2023-30659
CVE-2023-30659 affects SAMSUNG Mobile devices, specifically the Transaction module prior to SMR Jul-2023 Release 1. The root cause is improper input validation, enabling local attackers to perform privileged activities. Impact is described as local privilege escalation with high confidentiality, ...