MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to an improper input validation issue in the wlan driver, which may result in out-of-bounds writes...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from an improper input validation issue in the wlan service, which may result in out-of-bounds reads...

PT-2023-24044 · Unknown · Gnss Service

Name of the Vulnerable Software and Affected Versions: gnss service affected versions not specified Description: The issue is related to a possible out of bounds read in the gnss service due to improper input validation. This could lead to local information disclosure with System execution...

PT-2023-24046 · Unknown · Gnss Service

Name of the Vulnerable Software and Affected Versions: gnss service affected versions not specified Description: The issue is related to a possible out of bounds read in the gnss service due to improper input validation. This could lead to local information disclosure with System execution...

PT-2023-24043 · Unknown · Gnss Service

Name of the Vulnerable Software and Affected Versions: gnss service affected versions not specified Description: The issue is related to a possible out of bounds write in the gnss service due to improper input validation. This could lead to local information disclosure with System execution...

7Twenty BOT Cross-Site Scripting Vulnerability

7Twenty BOT is an artificial intelligence-based digital system from 7Twenty. 7Twenty BOT suffers from a cross-site scripting vulnerability that stems from incorrect neutralization of input during web page generation...

CVE-2023-41049

@dcl/single-sign-on-client is an open source npm library which deals with single sign on authentication flows. Improper input validation in the init function allows arbitrary javascript to be executed using the javascript: prefix. This vulnerability has been patched on version 0.1.0. Users are...

CVE-2023-4481

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When certain specific crafted BGP UPDATE messages are received over an established BG...

CVE-2023-4698

CVE-2023-4698 affects usememos/memos prior to 0.13.2. The connected exploit doc describes a Local File Inclusion (LFI) via an inadequate validation of InternalPath, enabling access to server files (post-auth or remote code execution risks are implied by LFI in the blog). Public advisories consist...

CVE-2023-4698 Improper Input Validation in usememos/memos

Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2...

CVE-2023-4481

CVE-2023-4481 describes an improper input validation in Juniper’s Routing Protocol Daemon (rpd) for Junos OS and Junos OS Evolved. A remote, unauthenticated attacker can cause a DoS by sending crafted BGP UPDATE messages over an existing BGP session; the impact can be sustained as updates are pro...

CVE-2023-4481 Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When certain specific crafted BGP UPDATE messages are received over an established BG...

CVE-2023-4481 Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When certain specific crafted BGP UPDATE messages are received over an established BG...

CVE-2023-41746

Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager Windows before build 6.2.23089.203...

CVE-2023-41748

Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager Windows before build 6.2.23089.203...

Input validation

Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager Windows before build 6.2.23089.203...

Input validation

Sensitive information disclosure due to improper input validation. The following products are affected: Acronis Cloud Manager Windows before build 6.2.23089.203...

Input validation

Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager Windows before build 6.2.23089.203...

CVE-2023-41748

Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager Windows before build 6.2.23089.203...

CVE-2023-41748

Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager Windows before build 6.2.23089.203...