2999 matches found
Input validation
A CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service, and potentially kernel execution when a malicious actor with local user access crafts a script/program using an unpredictable index to an IOCTL call in the Foxboro.sys driver...
CVE-2023-2570
CVE-2023-2570 involves an Improper Validation of Array Index in the Foxboro.sys driver IOCTL handling, leading to local denial-of-service and potential kernel execution. Root cause: incorrect validation of an array index. Affected product context appears to be Schneider Electric EcoStruxure Foxbo...
EulerOS Virtualization 3.0.6.0 : xorg-x11-server (EulerOS-SA-2023-2234)
According to the versions of the xorg-x11-server packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due ...
EulerOS Virtualization 3.0.6.0 : vim (EulerOS-SA-2023-2251)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing...
CVE-2023-1889 Directorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_task
The Directorist plugin for WordPress is vulnerable to an Insecure Direct Object Reference in versions up to, and including, 7.5.4. This is due to improper validation and authorization checks within the listingtask function. This makes it possible for authenticated attackers, with subscriber-level...
PT-2023-17317 · WordPress · Directorist
Name of the Vulnerable Software and Affected Versions: Directorist plugin for WordPress versions up to, and including, 7.5.4 Description: The issue arises from improper validation and authorization checks within the listing task function, allowing authenticated attackers with subscriber-level...
Updated libreoffice packages fix security vulnerability
Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet...
Improper Certificate Validation
org.keycloak:keycloak-services is vulnerable to Improper Certificate Validation. The flaw relies on enabling Revalidate Client Certificate and not validating the reverse proxy before Keycloak. An attacker is able to choose the server-validated certificate, resulting in authentication bypass...
EulerOS Virtualization 2.11.1 : ppp (EulerOS-SA-2023-2050)
According to the versions of the ppp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of th...
Ubuntu 20.04 LTS / 22.04 LTS : LibreOffice vulnerabilities (USN-6144-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6144-1 advisory. It was discovered that LibreOffice did not properly validate the number of parameters passed to the formula interpreter, leading to an array...
CVE-2022-22060
Assertion occurs while processing Reconfiguration message due to improper validation...
Input validation
Assertion occurs while processing Reconfiguration message due to improper validation...
CVE-2022-22060 Reachable Assertion in Modem
Assertion occurs while processing Reconfiguration message due to improper validation...
CVE-2022-22060
CVE-2022-22060 affects Qualcomm closed-source components. Root cause: assertion during processing of Reconfiguration messages due to improper validation. Impact: availability impact HIGH (CVSS v3.1 base score 7.5; network attack, no user interaction required). Mitigation/patch details are not pro...
CVE-2022-22060 Reachable Assertion in Modem
Assertion occurs while processing Reconfiguration message due to improper validation...
RHEL 9 : kpatch-patch (RHSA-2023:3490)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3490 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...
RHEL 9 : kernel-rt (RHSA-2023:3470)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3470 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...
LibreOffice 7.4 < 7.4.6 / 7.5 < 7.5.2 Array Index UnderFlow (Windows)
Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet...
LibreOffice 7.4 < 7.4.6 / 7.5 < 7.5.2 Array Index UnderFlow (Windows)
Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet...
WordPress Download Manager Plugin < 3.2.71 Improper Access Control Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpdownloadmanager:wordpressdownloadmanager"; ifdescription...