CVE-2023-21636: Improper Validation of Array Index

Memory Corruption due to improper validation of array index in Linux while updating adn record...

CVE-2023-28548: Improper Validation of Array Index

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART...

CVE-2023-28567: Improper Validation of Array Index

Memory corruption in WLAN HAL while handling command through WMI interfaces...

CVE-2023-28557: Improper Validation of Array Index

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload...

CVE-2022-40534: Improper Validation of Array Index

Memory corruption due to improper validation of array index in Audio...

CVE-2022-22305: Improper Validation of Certificate with Host Mismatch

An improper certificate validation vulnerability CWE-295 in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle th...

CVE-2023-2173

The BadgeOS plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.7.1.6. This is due to improper validation and authorization checks within the badgeosdeletestepajaxhandler, badgeosdeleteawardstepajaxhandler, badgeosdeletedeductstepajaxhandler,...

Acronis Agent 授权问题漏洞

Acronis Agent is an agent software from Acronis Singapore. A security vulnerability exists in Acronis Agent that stems from improper token expiration validation leading to the disclosure of sensitive information...

Sensitive information disclosure due to improper token expiration validation

...

MyBB < 1.8.36 RCE Vulnerability

MyBB is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...

Tenda AC23 sub_451784 function stack overflow vulnerability

Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. A stack overflow vulnerability exists in the Tenda AC23 sub451784 function. The vulnerability stems from the sub451784 function failing to properly validate the length of the input data, which can be exploited by an attacker to...

Input validation

IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 244368...

CVE-2023-22877 IBM InfoSphere Information Server CSV injection

IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 244368...

CVE-2023-22877

CVE-2023-22877 affects IBM InfoSphere Information Server 11.7. The root cause is CSV injection arising from improper validation of CSV contents during processing, enabling a remote attacker to execute arbitrary commands on the system. Documentation cites CVSS metrics with high impact (C/H, I/H, A...

SUSE CVE-2022-48538

In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cactildapauth allows a zero as the password...

PT-2023-37027

The Data Field module provides a way of building field types that are made up of other fields, a simpler alternative to e.g. the Paragraphs system. Access to these forms isn't properly validated, allowing a user with the "access content" permission to view and edit fields on entities...

Authentication flaw

In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cactildapauth allows a zero as the password...

CVE-2022-48538

In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cactildapauth allows a zero as the password...

CVE-2022-48538

In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cactildapauth allows a zero as the password...

CVE-2022-48538

In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cactildapauth allows a zero as the password...