Input validation

UNSUPPORTED WHEN ASSIGNED A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from...

CVE-2021-22767

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-2276...

CVE-2021-22765

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet...

CVE-2021-22768

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-22767...

CVE-2021-22765

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet...

CVE-2021-22768

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-22767...

CVE-2021-22766

The CVE-2021-22766 issue affects Schneider Electric PowerLogic EGX100 (versions 3.0.0 and newer) and PowerLogic EGX300 (all versions). It is a CWE-20 Improper Input Validation vulnerability that could cause Denial of Service via a specially crafted HTTP packet. Red Hat, CNVD/CNNVD, Tenable OT, an...

CVE-2021-22768

CVE-2021-22768 affects Schneider Electric PowerLogic EGX100 (v3.0.0 and newer) and EGX300 (All Versions). The root cause is CWE-20: improper input validation, allowing a specially crafted HTTP packet to cause denial of service or remote code execution. Documents confirm the vulnerability details ...

CVE-2021-25383

An improper input validation vulnerability in scmnmfalread in libsapeextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process...

CVE-2021-25385

An improper input validation vulnerability in sdfffdparsechunkPROP in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process...

CVE-2021-25385

An improper input validation vulnerability in sdfffdparsechunkPROP in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process...

CVE-2021-25387

An improper input validation vulnerability in sflacfdgetfrm in libsflacextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process...

CVE-2021-25386

An improper input validation vulnerability in sdfffdparsechunkFVER in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process...

CVE-2021-25385

An improper input validation vulnerability in sdfffdparsechunkPROP in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process...

CVE-2021-25396

An improper input validation vulnerability in NPU firmware prior to SMR MAY-2021 Release 1 allows arbitrary memory write and code execution...

CVE-2021-25385

The CVE-2021-25385 entry concerns an input-validation flaw in the libsdffextractor library, specifically in the sdfffd_parse_chunk_PROP() function, which can lead to remote arbitrary code execution on the mediaextractor process. Connected sources confirm the issue affects SamsungLibsdffextractor ...

CVE-2021-25386

An improper input validation vulnerability in sdfffdparsechunkFVER in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process...

CVE-2021-25386

Summary: The vulnerability CVE-2021-25386 affects the Samsung libsdffextractor library, specifically the improper input validation in the function sdfffd_parse_chunk_FVER(). This can allow attackers to execute arbitrary code on the mediaextractor process. Affected component: libsdffextractor (pri...

PT-2021-15203

Name of the Vulnerable Software and Affected Versions PowerLogic EGX100 versions 3.0.0 and newer PowerLogic EGX300 all versions Description A CWE-20: Improper Input Validation issue exists that could cause denial of service or remote code execution via a specially crafted HTTP packet...

PT-2021-16574 · Unknown · Libsapeextractor

Name of the Vulnerable Software and Affected Versions: libsapeextractor library versions prior to SMR MAY-2021 Release 1 Description: The issue is related to improper input validation in the scmn mfal read function, which can be exploited to execute arbitrary code on the mediaextractor process...