CVE-2023-20525: Improper Input Validation

Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped register potentially leading to a denial of service...

CVE-2023-20527: Improper Input Validation

Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service...

CVE-2023-21749: Improper Input Validation

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2023-20528: Improper Input Validation

Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality...

EulerOS Virtualization 2.9.0 : libtiff (EulerOS-SA-2023-1226)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a...

CVE-2021-26316: Improper Input Validation

Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM System Management Mode arbitrary code execution...

CVE-2023-20532: Improper Input Validation

Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a denial of service...

CVE-2021-26404: Improper Input Validation

Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure...

CVE-2022-23814: Improper Input Validation

Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest memory in a confidential compute environment...

CVE-2022-33300

Memory corruption in Automotive Android OS due to improper input validation...

Improper Input Validation

slixmpp is vulnerable to improper input validation. The vulnerability exists in xmlstream.py, which allows an attacker to access the system and perform unauthorized actions due to improper SSL certificate hostname validation...

CVE-2022-33300

CVE-2022-33300 affects Automotive Android OS with memory corruption caused by improper input validation. Evidence from connected docs identifies the affected software as Automotive Android OS and notes the root cause as input validation errors leading to memory corruption. Reported impact scores ...

CVE-2022-33300 Improper input validation in Automotive Android OS

Memory corruption in Automotive Android OS due to improper input validation...

CVE-2022-33218 Improper Input Validation in Automotive

Memory corruption in Automotive due to improper input validation...

CVE-2022-33218 Improper Input Validation in Automotive

Memory corruption in Automotive due to improper input validation...

EulerOS 2.0 SP9 : linux-firmware (EulerOS-SA-2023-1131)

According to the versions of the linux-firmware package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the firmware for some IntelR Graphics Drivers for Windows before version 26.20.100.7212 and before Linux kernel versi...

EulerOS 2.0 SP9 : linux-firmware (EulerOS-SA-2023-1107)

According to the versions of the linux-firmware package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the firmware for some IntelR Graphics Drivers for Windows before version 26.20.100.7212 and before Linux kernel versi...

Security Bulletin: A vulnerability in kafka affects IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2022-34917)

Summary There is a vulnerability in kafka that is used by the IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2022-34917 DESCRIPTION: Apache Kafka is vulnerable to a denial of service, caused by improper input validation. By sending a specially-craft...

Improper String/Integer Input Validation Leads to the Crashing of Site

Description If you give the string input in the Start/End time field, then the application will stop working. Proof of Concept 1. Go to "Settings-General-Reconnection" 2. Change activated to "on" 3. On every input fields place any string for example put: "test" 4. Click on save and refresh 5. The...

CVE-2022-23549: Improper Input Validation

Discourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 2.9.0.beta16 on the beta and tests-passed branches, users can create posts with raw body longer than the maxlength site setting by including html comments that are not counted toward the...