CVE-2022-33704

CVE-2022-33704 concerns an improper validation in KnoxSDK’s ucmRetParcelable prior to Samsung’s SMR Jul-2022 Release 1. The root cause is input validation failure in that function, which could allow an attacker to launch certain activities. Documents indicate remediation via Samsung’s Security Ma...

CVE-2022-33703

CVE-2022-33703 refers to an improper validation vulnerability in Samsung CACertificateInfo before the SMR July-2022 Release 1, enabling an elevation of privilege by exploiting faulty authentication logic. Public sources consistently describe the impact as attackers being able to "launch certain a...

Arbitrary File Upload

snipe/snipe-it is vulnerable to arbitrary file upload. The vulnerability exists in the store function in AcceptanceController.php due to improper validation of the update branding settings component, allowing an attacker to inject and execute arbitrary code through a maliciously crafted file...

CVE-2022-33711: Improper Validation of Integrity Check Value

Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allows local attackers to delete arbitrary directory using directory junction...

PT-2022-21820

Name of the Vulnerable Software and Affected Versions KnoxSDK versions prior to SMR Jul-2022 Release 1 Description The issue is related to an improper validation vulnerability in the ucmRetParcelable component of KnoxSDK. This vulnerability allows attackers to launch certain activities...

PT-2022-21819

Name of the Vulnerable Software and Affected Versions CACertificateInfo versions prior to SMR Jul-2022 Release 1 Description The issue is related to improper validation, allowing attackers to launch certain activities. Recommendations For versions prior to SMR Jul-2022 Release 1, update to SMR...

CVE-2022-20862 Cisco Unified Communications Manager Arbitrary File Read Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of a...

CVE-2022-20862: Relative Path Traversal

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of a...

CVE-2022-31603

NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high privileges and preconditioned IpSecDxe global data can exploit improper validation of an array index to cause code execution, which may lead to denial of service, data integrity impact, and information...

CVE-2022-0722

A flaw was found in the parse-url package. Affected versions of this package are vulnerable to information exposure due to an improper validation issue...

CVE-2022-31603: Improper Validation of Array Index

NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high privileges and preconditioned IpSecDxe global data can exploit improper validation of an array index to cause code execution, which may lead to denial of service, data integrity impact, and information...

CVE-2022-22373

An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead to creation of directories and files on the server file system that may contain non-sensitive debugging information like stack traces. IBM X-Force ID: 221323...

CVE-2022-22373: Undefined Security Weakness

An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead to creation of directories and files on the server file system that may contain non-sensitive debugging information like stack traces. IBM X-Force ID: 221323...

PT-2022-15398 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue is related to improper validation, which may allow the creation of directories and files on the server file system. These files may contain non-sensitive debugging...

Security Bulletin: IBM InfoSphere Information Server Pack for SAP Apps and BW Packs is affected by an improper validation vulnerability

Summary An improper validation vulnerability in IBM InfoSphere Information Server Pack for SAP Apps and BW Packs was addressed. Vulnerability Details CVEID:CVE-2022-22373 DESCRIPTION: An improper validation vulnerability in IBM InfoSphere Information Server Pack for SAP Apps and BW Packs may lead...

Improper Validation

chromium is vulnerable to improper validation. The vulnerability exists due to insufficient policy enforcement in the File System API component which allows an attacker to perform unauthorized actions...

Improper Certificate Validation

undici is vulnerable to improper certificate validation. The vulnerability exists improper validations of the remote server certificate exposing request & response data which allows an attacker to create his own self-signed certificate to connect to the server over the network...

CVE-2022-22072

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2021-35126

Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35081

Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...