EulerOS Virtualization 2.9.1 : libtiff (EulerOS-SA-2023-1196)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a...

EulerOS Virtualization 2.9.0 : libtiff (EulerOS-SA-2023-1226)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a...

CVE-2022-33300

Memory corruption in Automotive Android OS due to improper input validation...

Improper Input Validation

slixmpp is vulnerable to improper input validation. The vulnerability exists in xmlstream.py, which allows an attacker to access the system and perform unauthorized actions due to improper SSL certificate hostname validation...

CVE-2022-25890

All versions of the package wifey are vulnerable to Command Injection via the connect function due to improper input sanitization...

CVE-2022-25890

All versions of the package wifey are vulnerable to Command Injection via the connect function due to improper input sanitization...

CVE-2022-33300

CVE-2022-33300 affects Automotive Android OS with memory corruption caused by improper input validation. Evidence from connected docs identifies the affected software as Automotive Android OS and notes the root cause as input validation errors leading to memory corruption. Reported impact scores ...

CVE-2022-33300 Improper input validation in Automotive Android OS

Memory corruption in Automotive Android OS due to improper input validation...

CVE-2022-33218 Improper Input Validation in Automotive

Memory corruption in Automotive due to improper input validation...

CVE-2022-33218 Improper Input Validation in Automotive

Memory corruption in Automotive due to improper input validation...

EulerOS 2.0 SP9 : linux-firmware (EulerOS-SA-2023-1131)

According to the versions of the linux-firmware package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the firmware for some IntelR Graphics Drivers for Windows before version 26.20.100.7212 and before Linux kernel versi...

EulerOS 2.0 SP9 : linux-firmware (EulerOS-SA-2023-1107)

According to the versions of the linux-firmware package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the firmware for some IntelR Graphics Drivers for Windows before version 26.20.100.7212 and before Linux kernel versi...

Security Bulletin: A vulnerability in kafka affects IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2022-34917)

Summary There is a vulnerability in kafka that is used by the IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2022-34917 DESCRIPTION: Apache Kafka is vulnerable to a denial of service, caused by improper input validation. By sending a specially-craft...

Improper String/Integer Input Validation Leads to the Crashing of Site

Description If you give the string input in the Start/End time field, then the application will stop working. Proof of Concept 1. Go to "Settings-General-Reconnection" 2. Change activated to "on" 3. On every input fields place any string for example put: "test" 4. Click on save and refresh 5. The...

Command injection

Versions of the package window-control before 1.4.5 are vulnerable to Command Injection via the sendKeys function, due to improper input sanitization...

GHSA-3XH5-8HVQ-RC8X Apache DolphinScheduler vulnerable to Improper Input Validation

Apache DolphinScheduler improperly validates script alert plugin parameters and is vulnerable to remote command execution. This issue affects Apache DolphinScheduler version 3.0.1 and prior versions; version 3.1.0 and prior versions. Users should upgrade to version 3.0.2 or 3.1.1...

Cross-site Scripting (XSS)

trafficserver is vulnerable to improper input validation. The library does not properly escape the special characters before it output to the front end, allowing an attacker to inject and execute malicious javascript...

window-control 安全漏洞

window-control is a package from Bruno Robert's personal developer. It is designed to perform tasks similar to robot.js without mouse control, but without compiling external C++ code. A security vulnerability exists in window-control versions prior to 1.4.5, which stems from incorrect input and i...

MediaTek 芯片 缓冲区错误漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in MediaTek Chipsets that stems from improper input validation in ccu, which could result in out-of-bounds writes, which could lead to local privilege escalation requiring syste...

PT-2023-13116 · Boa · Boa

Name of the Vulnerable Software and Affected Versions: Boa affected versions not specified Description: The issue is related to improper input validation, which could lead to a command injection. This might result in remote escalation of privilege without requiring additional execution privileges...