CVE-2023-6012

CVE-2023-6012 affects Lanaccess ONSAFE MonitorHM Web Console, version 3.7.0. The root cause is an improper input validation on the checkbox element, enabling a remote attacker to perform remote code execution and potentially compromise the entire infrastructure. The exploitation details are not p...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

Confluence Vulnerability - CVE-2023-22515 :notebook: Int...

hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi

An improper input validation flaw was found in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software that may allow an unauthenticated user to enable a denial of service via adjacent access...

CVE-2023-42538

An improper input validation in sapedrecsilence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...

CVE-2023-42536

An improper input validation in sapeddec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...

CVE-2023-42537

An improper input validation in getheadcrc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...

CVE-2023-42533

Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel...

Input validation

Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel...

CVE-2023-42538

The CVE-2023-42538 entry concerns the libsaped library (libsaped) with an issue in the saped_rec_silence function (often referred to as the saped rec silence function). The root cause is improper input validation, enabling local attackers to trigger an out-of-bounds read and write. Affected versi...

CVE-2023-42538

An improper input validation in sapedrecsilence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...

CVE-2023-42537

An improper input validation in getheadcrc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...

CVE-2023-42537

The CVE-2023-42537 issue affects/libsaped, specifically the function get_head_crc. The vulnerability stems from improper input validation, enabling a local attacker to cause out-of-bounds reads and writes before the SMR Nov-2023 Release 1. The affected component is the get_head_crc routine in lib...

CVE-2023-42536

An improper input validation in sapeddec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...

CVE-2023-42536

The CVE-2023-42536 issue affects libsaped’s saped_dec component in Samsung Libsaped, with versions prior to the SMR Nov-2023 Release 1 being vulnerable. The root cause is improper input validation in saped_dec, enabling local attackers to trigger an out-of-bounds read and write, potentially compr...

CVE-2023-42534

CVE-2023-42534 affects Samsung Mobile devices via the ChooserActivity module, where improper input validation allows a local attacker to read arbitrary files with system privileges. The issue is documented as present prior to SMR Nov-2023 Release 1. The vulnerability is addressed by Samsung’s sec...

CVE-2023-42534

Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege...

CVE-2023-42534

Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege...

CVE-2023-42533

CVE-2023-42533 affects Samsung Mobile devices prior to SMR Nov-2023 Release 1. The root cause is improper input validation on the USB Gadget Interface, allowing a physical attacker to execute arbitrary code in the kernel. Impact is kernel compromise with high confidentiality, integrity, and avail...

CVE-2023-42528

Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-42528

CVE-2023-42528 affects Samsung devices via the libsec-ril component, specifically the ProcessNvBuffering path. The root cause is improper input validation, enabling a local attacker to execute arbitrary code. The vulnerability is tied to Samsung’s SMR November 2023 Release 1 remediation; affected...