CVE-2023-31148 Improper Input Validation in Web Interface

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to execute arbitrary code. See SEL Service Bulletin dated 2022-11-15 for more details...

CVE-2023-25772

Improper input validation in the IntelR Retail Edge Mobile Android application before version 3.0.301126-RELEASE may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-36339

Improper input validation in firmware for IntelR NUC 8 Compute Element, IntelR NUC 11 Compute Element, IntelR NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access...

CVE-2022-25976

Improper input validation in the IntelR VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-25772

Improper input validation in the IntelR Retail Edge Mobile Android application before version 3.0.301126-RELEASE may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-25772

The CVE-2023-25772 issue affects Intel(R) Retail Edge Mobile Android app prior to version 3.0.301126-RELEASE, caused by improper input validation. An authenticated user could potentially trigger a local-denial-of-service. Remediation: update to 3.0.301126-RELEASE or newer. Exploit details are not...

CVE-2022-33894

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-38787

Improper input validation in firmware for some IntelR FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-37327

Improper input validation in BIOS firmware for IntelR NUC, IntelR NUC Performance Kit, IntelR NUC Performance Mini PC, IntelR NUC 8 Compute Element, IntelR NUC Pro Kit, IntelR NUC Pro Board, IntelR NUC 11 Compute Element, IntelR NUC 12 Compute Element, IntelR NUC Extreme, IntelR NUC 12 Extreme...

CVE-2022-37327

CVE-2022-37327 describes improper input validation in Intel NUC BIOS firmware (across multiple NUC elements and kits) that may allow a privileged local user to cause information disclosure. Connected sources confirm affected products include various Intel NUC firmware components (e.g., NUC 8/11/1...

CVE-2022-28699: Improper Input Validation

Improper input validation for some IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-25175: Improper Input Validation

Improper input validation in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access...

CVE-2022-38787: Improper Input Validation

Improper input validation in firmware for some IntelR FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-37327: Improper Input Validation

Improper input validation in BIOS firmware for IntelR NUC, IntelR NUC Performance Kit, IntelR NUC Performance Mini PC, IntelR NUC 8 Compute Element, IntelR NUC Pro Kit, IntelR NUC Pro Board, IntelR NUC 11 Compute Element, IntelR NUC 12 Compute Element, IntelR NUC Extreme, IntelR NUC 12 Extreme...

CVE-2022-25976: Improper Input Validation

Improper input validation in the IntelR VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-1732: Improper Input Validation

When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether crypto/rand.Read returns an error. In rare deployment cases error thrown by the Read function, this could lead to a predictable shared secret. The tkn20 and blindrsa components did not...

CVE-2023-31161: Improper Input Validation

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential effects. See SEL Service Bulletin dated 2022-11-15 f...

CVE-2023-31149: Improper Input Validation

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to execute arbitrary code. See SEL Service Bulletin dated 2022-11-15 for more details...

The web interface of Netgear’s SRX5308 router software has vulnerabilities that allow attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface for managing Netgear SRX5308 integrated software routers exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request using...

Microsoft SharePoint AdRotator Improper Input Validation NTLM Relay Vulnerability

This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the AdRotator WebControl. The issue results from the lack of prop...