16690 matches found
CVE-2023-29494: Improper Input Validation
Improper input validation in BIOS firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-36351: Improper Input Validation
Improper input validation in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2022-34657: Improper Input Validation
Improper input validation in firmware for some IntelR PCSD BIOS before version 02.01.0013 may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-36392: Improper Input Validation
Improper input validation in some firmware for IntelR AMT and IntelR Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel R CSME may allow an unauthenticated user to potentially enable denial of service via network access...
CVE-2022-44611: Improper Input Validation
Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via adjacent access...
CVE-2023-39553: Improper Input Validation
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider. Apache Airflow Drill Provider is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection with DrillHook giving an opportunity to read fil...
CVE-2022-38076: Improper Input Validation
Improper input validation in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-38102: Improper Input Validation
Improper Input validation in firmware for some IntelR Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may allow a privileged user to potentially enable denial of service via local access...
CVE-2023-26587: Improper Input Validation
Improper input validation for the IntelR Easy Streaming Wizard software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-37336: Improper Input Validation
Improper input validation in BIOS firmware for some IntelR NUC may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-30697
An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...
CVE-2023-30697
CVE-2023-30697 : An improper input validation in IpcTxCfgSetSimlockPayload within Samsung libsec-ril leads to an out-of-bounds write. Affected: Samsung Mobile devices with SMR Aug-2023 Release 1 and related Samsung patches. Impact is described as high for confidentiality, integrity, and availabil...
CVE-2023-30696
An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...
CVE-2023-30696
An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...
CVE-2023-30696: Out-of-bounds Write
An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...
CVE-2023-30681: Out-of-bounds Write
An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...
CVE-2023-22378 Authenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.2
A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the sorting parameter, allows an authenticated attacker to execute arbitrary SQL statements on the DBMS used by the web application. Authenticated users may be able to extract arbitrary...
Improper Input Validation
prestashop/prestashop is vulnerable to Improper Input Validation. The vulnerability exists in the delete function of Attachment.php because the file parameter is not properly handled which allows an attacker to delete arbitrary files...
UBUNTU-CVE-2023-33934
Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1...
CVE-2023-33934
CVE-2023-33934 describes an Improper Input Validation vulnerability in the Apache Traffic Server. Affected software includes Traffic Server up to version 9.2.1 . Debian advisories indicate the issue is addressed in newer packages (e.g., Debian bookworm: 9.2.3+ds-1+deb12u1; Debian bullseye: 8.1.9+...