CVE-2023-30658

The CVE-2023-30658 issue affects the DataProfile module in Samsung devices (SMR Jul-2023 Release 1). Root cause: improper input validation, enabling a local attacker to perform privileged activities. Impact is described as high, with local attack vector and privileges required as low, no user int...

CVE-2023-30658

Improper input validation vulnerability in DataProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30657

The CVE-2023-30657 issue affects Samsung EnhancedAttestationResult and is caused by improper input validation. The vulnerability allows local attackers to execute privileged activities on affected devices. Samsung’s documentation indicates the vulnerability was addressed in the SMR Jul-2023 Relea...

CVE-2023-30656

CVE-2023-30656 concerns LSOItemData with an improper input validation flaw that could allow an attacker to launch certain activities. Technical details in connected documents identify LSOItemData as affected, with impact tied to improper input validation and a requirement that vulnerable versions...

CVE-2023-30655

Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30655

Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

ROS-2-1741

2.1741 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

PT-2023-22862 · Unknown · Libsec-Ril

Name of the Vulnerable Software and Affected Versions: libsec-ril versions prior to SMR Jul-2023 Release 1 Description: The issue is related to an improper input validation vulnerability in the DoOemImeiSetPreconfig function within libsec-ril. This vulnerability allows local attackers to cause an...

Gitea 输入验证错误漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. An input validation error vulnerability exists in Gitea versions prior to 1.19.4, which stems from improper input validation of the program. An attacker can exploit this vulnerability to obtain sensitive information...

CVE-2023-25522

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

CVE-2023-25522

CVE-2023-25522 affects NVIDIA DGX A100/A800 SBIOS prior to version 1.21. The issue: improper input validation when configuration information is provided in an unexpected format, which may allow an attacker with local access to cause denial of service, information disclosure, and data tampering. N...

Apache Airflow Hive Provider Beeline remote code execution with Principal

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive Provider. This issue affects Apache Airflow Apache Hive Provider: before 6.1.1. Before version 6.1.1 it was possible to bypass the security check to RCE via principal parameter. For this to be exploited it...

CVE-2023-35797

CVE-2023-35797 affects Apache Airflow Hive Provider prior to 6.1.1 and is an Improper Input Validation vulnerability that can enable remote code execution via the principal parameter when connection details are modifiable. The issue is mitigated by upgrading the provider to version 6.1.1 or later...

ASB-A-204554636

In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

Fedora 38 : pcs (2023-b86fd9ad80)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b86fd9ad80 advisory. - Rebased to the latest upstream sources see CHANGELOG.md - Updated pcs-web-ui - Removed dependency fedora-logos - favicon is now correctly provided by...

CVE-2023-28324

Ivanti Endpoint Manager (EPM) contains a vulnerability in the Agent Portal where AgentPortal.exe (and related components) accepts unauthenticated RPC calls that can be used to execute arbitrary commands with SYSTEM privileges. The issue stems from improper input validation in the Agent Portal dia...

MITRE Unveils Top 25 Most Dangerous Software Weaknesses of 2023: Are You at Risk?

MITRE has released its annual list of the Top 25 "most dangerous software weaknesses" for the year 2023. "These weaknesses lead to serious vulnerabilities in software," the U.S. Cybersecurity and Infrastructure Security Agency CISA said. "An attacker can often exploit these vulnerabilities to tak...

MITRE Unveils Top 25 Most Dangerous Software Weaknesses of 2023: Are You at Risk?

MITRE has released its annual list of the Top 25 "most dangerous software weaknesses" for the year 2023. "These weaknesses lead to serious vulnerabilities in software," the U.S. Cybersecurity and Infrastructure Security Agency CISA said. "An attacker can often exploit these vulnerabilities to tak...

Debian dla-3475 : trafficserver - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3475 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3475-1 [email protected]...

Juniper Junos OS Vulnerability (JSA71542)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA71542 advisory. An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based...