7702 matches found
The vulnerability of the system file manager Finder on Mac OS operating systems allows a hacker to execute arbitrary operating system commands.
The vulnerability of the system file manager Finder on Mac OS is due to incorrect validation of input data during the processing of user-defined URIs File:// or File:. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the operating system remotely...
SUSE SLES15 Security Update : rabbitmq-server (SUSE-SU-2021:3325-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3325-1 advisory. - CVE-2021-32718: Fixed improper neutralization of script-related HTML tags in a web page basic XSS in management UI bsc1187818. -...
CVE-2021-0687
In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Androi...
Improper Input Validation in filebrowser/filebrowser
Description File Browser is a web-interface that allows you to manage and navigate through your files in a web browser. One of its features is to allow a user to run specific shell commands in the server, these commands are specified by users with administrator privileges, with an allow list. Thi...
CVE-2021-40712
Adobe Experience Manager version 6.5.9.0 and earlier is affected by a improper input validation vulnerability via the path parameter. An authenticated attacker can send a malformed POST request to achieve server-side denial of service...
CVE-2021-40712
CVE-2021-40712 affects Adobe Experience Manager 6.5.x (6.5.9.0 and earlier). The issue is improper input validation on the path parameter, enabling an authenticated attacker to send a malformed POST that causes a server-side denial of service. Severity is reflected as MEDIUM (CVSS v3.1 base score...
Samba 4.0.0 <= 4.0.17 Improper Input Validation Vulnerability (CVE-2014-0239)
Potential DOS in Samba internal DNS server. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Samba 3.3.10, 3.4.3, 3.5.0 and later Improper Input Validation Vulnerability (CVE-2012-6150)
Login of authenticated users is not restricted by the pamwinbind requiremembershipof parameter if it only specifies invalid group names. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...
Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2021-2484)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe Experience Manager improper input validation vulnerability
Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of content and assets. Adobe Experience Manager CS, version 6.5.10.0 is vulnerable to improper input validation. An attacker could exploit this vulnerability to cause a denial...
CVE-2021-20569
IBM Security Secret Server up to 11.0 could allow an attacker to enumerate usernames due to improper input validation. IBM X-Force ID: 199243...
Siemens SIPROTEC 5 (Update A)
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIPROTEC 5 Vulnerability: Improper Input Validation 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-21-257-16 Siemens SIPROTEC 5 that...
Adobe Experience Manager 输入验证错误漏洞
Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of content and assets. Adobe Experience Manager CS, version 6.5.10.0 is vulnerable to improper input validation. An attacker could exploit this vulnerability to cause a denial...
Security Bulletin: Multiple Vulnerabilities Have Been Identified In IBM Security Verify Privilege Vault
Summary Multiple vulnerabilities identified in IBM Security Verify Privilege Vault previously known as IBM Security Secret Server have been addressed in the release 11.0. Vulnerability Details CVEID: CVE-2021-20569 DESCRIPTION: IBM Security Verify Privilege could allow an attacker to enumerate...
Python < 2.7.17, 3.x < 3.5.8, 3.6.x < 3.6.10, 3.7.x < 3.7.5 Improper Input Validation Vulnerability (bpo-34155) - Windows
The email module in Python is vulnerable due to improper input validation. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2021-25457
An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a limited kernel memory information...
CVE-2021-25449
An improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in mediaextractor process...
CVE-2021-25449
An improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in mediaextractor process...
