11834 matches found
CVE-2022-36351
Improper input validation in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access...
Input validation
Improper neutralization in software for the IntelR oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable denial of service via local access...
Input validation
Improper Input validation in firmware for some IntelR Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may allow a privileged user to potentially enable denial of service via local access...
CVE-2023-34086
Improper input validation in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-36392
Improper input validation in some firmware for IntelR AMT and IntelR Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel R CSME may allow an unauthenticated user to potentially enable denial of service via network access...
CVE-2022-36351
Improper input validation in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access...
Intel Converged Security and Management Engine Security Vulnerability
Intel Converged Security and Management Engine CSME is a security management engine from Intel Corporation USA. A security vulnerability exists in Intel Converged Security and Management Engine versions prior to 15.0.45, which stems from incorrect input validation. An attacker could exploit this...
PT-2023-4419
Name of the Vulnerable Software and Affected Versions Apache Airflow Drill Provider versions prior to 2.4.3 Description The issue is related to improper input validation in Apache Airflow Drill Provider, allowing an attacker to pass malicious parameters when establishing a connection with...
CVE-2023-30697
An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...
CVE-2023-30697
CVE-2023-30697 : An improper input validation in IpcTxCfgSetSimlockPayload within Samsung libsec-ril leads to an out-of-bounds write. Affected: Samsung Mobile devices with SMR Aug-2023 Release 1 and related Samsung patches. Impact is described as high for confidentiality, integrity, and availabil...
CVE-2023-30696
An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...
CVE-2023-30696
An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...
CVE-2023-22378 Authenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.2
A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the sorting parameter, allows an authenticated attacker to execute arbitrary SQL statements on the DBMS used by the web application. Authenticated users may be able to extract arbitrary...
Improper Input Validation
prestashop/prestashop is vulnerable to Improper Input Validation. The vulnerability exists in the delete function of Attachment.php because the file parameter is not properly handled which allows an attacker to delete arbitrary files...
UBUNTU-CVE-2023-33934
Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1...
CVE-2023-33934
CVE-2023-33934 describes an Improper Input Validation vulnerability in the Apache Traffic Server. Affected software includes Traffic Server up to version 9.2.1 . Debian advisories indicate the issue is addressed in newer packages (e.g., Debian bookworm: 9.2.3+ds-1+deb12u1; Debian bullseye: 8.1.9+...
CVE-2022-47185
CVE-2022-47185 affects Apache Traffic Server up to version 9.2.1, due to an improper input validation vulnerability in the range header. Several connected sources confirm fixes in later releases: Debian security updates fix to 9.2.3+ds-1+deb12u1 (Debian DSA-5549‑1 / DLA-3595-1) and OSV entries do...
Zoom Client < 5.14.7 Multiple Privilege Escalation Vulnerabilities (ZSB-23030, ZSB-23032) - Windows
Zoom Client is prone to multiple privilege escalation vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom"...