4453 matches found
CVE-2022-40539 Improper Validation of Array Index in Automotive Android OS
Memory corruption in Automotive Android OS due to improper validation of array index...
CVE-2022-40539
CVE-2022-40539 affects Automotive Android OS on Qualcomm-based platforms. Root cause is memory corruption due to improper validation of an array index in the affected component/file. Documented impact is high (confidentiality, integrity, availability) with local, low-effort access required and no...
CVE-2022-33256 Improper validation of array index in Multi-mode call processor
Memory corruption due to improper validation of array index in Multi-mode call processor...
CVE-2022-40537: Improper Validation of Array Index
Memory corruption in Bluetooth HOST while processing the AVRCPDUGETPLAYERAPPVALUETEXT AVRCP response...
CVE-2022-33256: Improper Validation of Array Index
Memory corruption due to improper validation of array index in Multi-mode call processor...
CVE-2022-45142: Improper Validation of Integrity Check Value
The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0 branches and possibly other branches a logic inversion sneaked...
WordPress plugin WooCommerce Checkout Field Manager 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Social Sharing is a social sharing plugin used in it.WordPress plugin is an applicatio...
Input validation
authentik is an open-source Identity Provider. Due to an insufficient access check, a recovery flow link that is created by an admin or sent via email by an admin can be used to set the password for any arbitrary user. This attack is only possible if a recovery flow exists, which has both an...
CVE-2023-26481 Insufficient user check in FlowTokens by Email stage
authentik is an open-source Identity Provider. Due to an insufficient access check, a recovery flow link that is created by an admin or sent via email by an admin can be used to set the password for any arbitrary user. This attack is only possible if a recovery flow exists, which has both an...
CVE-2023-26481 Insufficient user check in FlowTokens by Email stage
authentik is an open-source Identity Provider. Due to an insufficient access check, a recovery flow link that is created by an admin or sent via email by an admin can be used to set the password for any arbitrary user. This attack is only possible if a recovery flow exists, which has both an...
Linux v4l2-mem2mem Heap Buffer Overflow Privilege Escalation
The vulnerability of the v4l2m2mquerybuf function in the v4l2-mem2mem.c component of the Linux operating system is related to writing beyond the buffer limit due to incorrect input validation. Exploiting this vulnerability can allow an attacker to cause system failures, gain elevated privileges, ...
CVE-2020-5002 IBM Financial Transaction Manager security bypass
IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions due to improper validation. IBM X-Force ID: 192954...
PT-2023-11913
Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager versions 3.2.0 through 3.2.10 Description The issue is due to improper validation, allowing an authenticated user to perform unauthorized actions. Recommendations For IBM Financial Transaction Manager versions...
CVE-2023-27292
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...
Remote Code Execution (RCE)
apacheairflowprovidersgoogle is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper validation for th cloud sql provider parameter in the downloadsqlproxyifneeded function of cloudsql.py which allows an attacker to upload and execute malicious code on the system...
CVE-2023-27292
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...
CVE-2023-27292
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...
CVE-2023-27292
OpenCATS (OpenCATS) has an open redirect vulnerability (CVE-2023-27292) caused by improper validation of user-supplied GET parameters, with potential exposure to template injection and related data access/modification risks. The Nuclei template confirms the issue as an open redirect, describing i...
PTC ThingWorx Edge
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: PTC Equipment: ThingWorx Edge Vulnerabilities: Improper Validation of Array Index, Integer Overflow or Wraparound 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...