16759 matches found
CVE-2023-5079: Improper Input Validation
Lenovo LeCloud App improper input validation allows attackers to access arbitrary components and arbitrary file downloads, which could result in information disclosure...
CVE-2023-6012: Improper Input Validation
An improper input validation vulnerability has been found in Lanaccess ONSAFE MonitorHM affecting version 3.7.0. This vulnerability could lead a remote attacker to exploit the checkbox element and perform remote code execution, compromising the entire infrastructure...
CVE-2023-47107: Improper Input Validation
PILOS is an open source front-end for BigBlueButton servers with a built-in load balancer. The password reset component deployed within PILOS uses the hostname supplied within the request host header when building a password reset URL. It may be possible to manipulate the URL sent to PILOS users...
hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi
An improper input validation flaw was found in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software that may allow an unauthenticated user to enable a denial of service via adjacent access...
CVE-2023-42538
An improper input validation in sapedrecsilence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...
CVE-2023-42536
An improper input validation in sapeddec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...
CVE-2023-42537
An improper input validation in getheadcrc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...
CVE-2023-42533
Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel...
Input validation
Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel...
CVE-2023-42538
The CVE-2023-42538 entry concerns the libsaped library (libsaped) with an issue in the saped_rec_silence function (often referred to as the saped rec silence function). The root cause is improper input validation, enabling local attackers to trigger an out-of-bounds read and write. Affected versi...
CVE-2023-42538
An improper input validation in sapedrecsilence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...
CVE-2023-42537
An improper input validation in getheadcrc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...
CVE-2023-42537
The CVE-2023-42537 issue affects/libsaped, specifically the function get_head_crc. The vulnerability stems from improper input validation, enabling a local attacker to cause out-of-bounds reads and writes before the SMR Nov-2023 Release 1. The affected component is the get_head_crc routine in lib...
CVE-2023-42536
An improper input validation in sapeddec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...
CVE-2023-42536
The CVE-2023-42536 issue affects libsaped’s saped_dec component in Samsung Libsaped, with versions prior to the SMR Nov-2023 Release 1 being vulnerable. The root cause is improper input validation in saped_dec, enabling local attackers to trigger an out-of-bounds read and write, potentially compr...
CVE-2023-42534
CVE-2023-42534 affects Samsung Mobile devices via the ChooserActivity module, where improper input validation allows a local attacker to read arbitrary files with system privileges. The issue is documented as present prior to SMR Nov-2023 Release 1. The vulnerability is addressed by Samsung’s sec...
CVE-2023-42534
Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege...
CVE-2023-42534
Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege...
CVE-2023-42533
CVE-2023-42533 affects Samsung Mobile devices prior to SMR Nov-2023 Release 1. The root cause is improper input validation on the USB Gadget Interface, allowing a physical attacker to execute arbitrary code in the kernel. Impact is kernel compromise with high confidentiality, integrity, and avail...