CVE-2023-30692

Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30692

CVE-2023-30692 affects Samsung SMR Oct-2023 Release 1: Evaluator with improper input validation, enabling local attackers to launch privileged activities. Affected: Evaluator versions prior to SMR Oct-2023 Release 1. Impact: local privilege escalation; exploitation details are not provided in the...

CVE-2023-30690

Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30690

CVE-2023-30690 relates to an improper input validation vulnerability in Samsung Duo prior to SMR Oct-2023 Release 1. The issue enables local attackers to perform privileged activities by exploiting input validation flaws in the Duo component on affected Samsung mobile devices. Affected software i...

CVE-2023-30690

Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-42448: Improper Input Validation

Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, the specification states that the contestation period in the datum of the UTxO at the head validator must stay unchanged as the state progresses from Open to Closed Close transaction, but no such check appears to be...

CVE-2023-43799: Improper Input Validation

Altair is a GraphQL Client. Prior to version 5.2.5, the Altair GraphQL Client Desktop Application does not sanitize external URLs before passing them to the underlying system. Moreover, Altair GraphQL Client also does not isolate the context of the renderer process. This affects versions of the...

CVE-2023-22515: Improper Input Validation

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access...

CVE-2023-39191: Improper Input Validation

An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic pointers within user-supplied eBPF programs prior to executing them. This may allow an attacker with CAPBPF privileges to escalate privileges and...

CVE-2023-30690: Improper Input Validation

Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-36619: Improper Input Validation

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users...

Atlassian Confluence Unauthenticated Remote Code Execution

This module exploits an improper input validation issue in Atlassian Confluence, allowing arbitrary HTTP parameters to be translated into getter/setter sequences via the XWorks2 middleware and in turn allows for Java objects to be modified at run time. The exploit will create a new administrator...

CVE-2023-30738: Undefined Security Weakness

An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption...

CVE-2023-30692: Undefined Security Weakness

Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-42449: Improper Input Validation

Hydra is the two-layer scalability solution for Cardano. Prior to version 0.13.0, it is possible for a malicious head initializer to extract one or more PTs for the head they are initializing due to incorrect data validation logic in the head token minting policy which then results in an flawed...

CVE-2023-38701: Improper Input Validation

Hydra is the layer-two scalability solution for Cardano. Users of the Hydra head protocol send the UTxOs they wish to commit into the Hydra head first to the commit validator, where they remain until they are either collected into the head validator or the protocol initialisation is aborted and t...

CVE-2023-24853 Improper Input Validation in HLOS

Memory Corruption in HLOS while registering for key provisioning notify...

CVE-2023-24853 Improper Input Validation in HLOS

Memory Corruption in HLOS while registering for key provisioning notify...

CVE-2023-24853: Improper Input Validation

Memory Corruption in HLOS while registering for key provisioning notify...

CVE-2023-42508: Improper Input Validation

JFrog Artifactory prior to version 7.66.0 is vulnerable to specific endpoint abuse with a specially crafted payload, which can lead to unauthenticated users being able to send emails with manipulated email body...