CVE-2023-26070: Improper Input Validation

Certain Lexmark devices through 2023-02-19 mishandle Input Validation issue 4 of 4...

CVE-2023-26069: Improper Input Validation

Certain Lexmark devices through 2023-02-19 mishandle Input Validation issue 3 of 4...

ABB AC500 Improper Check for Unusual or Exceptional Conditions (CVE-2022-3192)

Improper Input Validation vulnerability in ABB AC500 V2 PM5xx allows Client-Server Protocol Manipulation.This issue affects AC500 V2: from 2.0.0 before 2.8.6. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900...

CVE-2023-26068: Improper Input Validation

Certain Lexmark devices through 2023-02-19 mishandle Input Validation issue 2 of 4...

PT-2023-20464 · Lexmark · Lexmark Devices

Name of the Vulnerable Software and Affected Versions: Lexmark devices affected versions not specified Description: The issue is related to improper input validation, which can lead to remote code execution. This is described as issue 3 of 4, indicating it is one part of a larger set of problems...

CVE-2023-30450: Improper Input Validation

rpk in Redpanda before 23.1.2 mishandles the redpanda.rpcservertls field, leading to for example situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must reconfigure while a cluster is turned off in order to have TLS on broker RPC ports...

CVE-2023-28710

Apache Airflow Spark Provider (before 4.0.1) is affected by CVE-2023-28710 due to improper input validation in the JDBC Hook, where host/schema can contain “/” or “?”, enabling an attacker to read arbitrary files during connection setup. Affected product: Apache Airflow Spark Provider prior to 4....

CVE-2023-28707 Airflow Apache Drill Provider Arbitrary File Read Vulnerability

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.This issue affects Apache Airflow Drill Provider: before 2.3.2...

CVE-2023-28707

Apache Airflow Drill Provider (Apache Software Foundation) before 2.3.2 is affected by an improper input validation vulnerability in drill connections (unsanitized host). This can enable reading arbitrary files exposed by the vulnerable component. CVSS v3.1 base score 7.5 (HIGH). Remediation: upg...

CVE-2023-28707 Airflow Apache Drill Provider Arbitrary File Read Vulnerability

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.This issue affects Apache Airflow Drill Provider: before 2.3.2...

Improper Input Validation

phpmyfaq is vulnerable to Improper Input Validation. The library does not properly neutralize user-controllable inputs before it is placed as frontend outputs on a web page served to other users which allows an attacker to perform privileged operations on behalf of the user or gain access to...

CVE-2023-28710: Improper Input Validation

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.This issue affects Apache Airflow Spark Provider: before 4.0.1...

CVE-2023-28707: Improper Input Validation

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.This issue affects Apache Airflow Drill Provider: before 2.3.2...

CVE-2023-20680

In adsp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664785; Issue ID: ALPS07664785...

CVE-2023-20681: Out-of-bounds Write

In adsp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07696134; Issue ID: ALPS07696134...

Kibana ESA-2023-02

Kibana versions before 7.17.9 and 8.6.1 have vulnerability CVE-2022-38900 in one of Kibana's implementation of decode-uri-component, which is vulnerable to Improper Input Validation, which could allow an authenticated attacker to perform a request that crashes the Kibana server process...

CVE-2023-20149: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. These vulnerabilities are due t...

CVE-2022-25747 Buffer Over-read in MODEM

Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message...

CVE-2022-25747

CVE-2022-25747 affects Qualcomm modem chipsets. The vulnerability is caused by improper input validation during parsing of upcoming CoAP messages, leading to information disclosure. Reported impact indicates high confidentiality impact (C:H/I:N/A:N) with network attack vector and low attack compl...

CVE-2022-25745

CVE-2022-25745 describes memory corruption in a modem caused by improper input validation when handling incoming CoAP messages. The CVE is associated with Qualcomm chipsets/modem firmware; CVSS v3.1 metrics indicate a critical impact (CVSS 9.8, NETWORK attack vector, no privileges or user interac...