11368 matches found
CVE-2024-34593
CVE-2024-34593 affects librtp.so prior to SMR Jul-2024 Release 1. The issue is improper input validation during parsing/distribution of RTCP packets, enabling remote code execution with system privileges. User interaction is required to trigger exploitation. According to PT-2024-26008, remediatio...
CVE-2024-34592
Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...
CVE-2024-34591
Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...
CVE-2024-34590
Improper input validation혻in parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...
CVE-2024-34589
CVE-2024-34589 affects librtp.so prior to SMR Jul-2024 Release 1, due to improper input validation when parsing RTCP RR packets. This can allow remote attackers to trigger a temporary denial of service, with user interaction required to trigger the condition. Affected component: librtp.so (RTCP R...
CVE-2024-20901
Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2024-20901
CVE-2024-20901 concerns libsaped prior to Samsung SMR Jul-2024 Release 1, with an improper input validation in copying data to the buffer cache that enables a local attacker to write out-of-bounds memory. Connected sources specify the affected component as libsaped and cite the local-privilege im...
CVE-2024-20901
Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2024-20893
Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption...
CVE-2024-20890
Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior...
UBUNTU-CVE-2024-38857
Improper neutralization of input in Checkmk before versions 2.3.0p8, 2.2.0p28, 2.1.0p45, and 2.0.0 EOL allows attackers to craft malicious links that can facilitate phishing attacks...
CVE-2024-0158
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges...
PT-2024-18803 · Unknown · Bluetooth Low Energy
Name of the Vulnerable Software and Affected Versions: Bluetooth Low Energy BLE versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper input validation in BLE, which allows adjacent attackers to trigger abnormal behavior. Recommendations: For versions prior to SMR...
SAMSUNG Mobile devices security vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Jul-2024 Release 1, which stems from an improper input validation issue in parsing and...
CVE-2024-39313 toy-blog Improper Input Validation vulnerability
toy-blog is a headless content management system implementation. Starting in version 0.5.4 and prior to version 0.6.1, articles with private visibility can be read if the reader does not set credentials for the request. Users should upgrade to 0.6.1 or later to receive a patch. No known workaroun...
Cross Site Scripting(XSS)
zenml is vulnerable to Cross-Site Scripting XSS . The vulnerability is due to improper input neutralization during web page generation within the survey redirect parameter, which allows an attacker to execute arbitrary JavaScript code in the context of the user's browser session...
Improper Input Validation
github.com/gin-contrib/cors is vulnerable to Improper Input Validation. The vulnerability is caused due to improper handling of wildcards in origin strings in the parseWildcardRules function within the cors.go file. This allows an attacker to bypass origin restrictions by using similar but...
SOKRATES-software SOWA OPAC Security Vulnerability
SOKRATES-software SOWA OPAC is an application from SOKRATES-software. Converts card catalogs of books and magazines into online electronic catalogs. A security vulnerability exists in SOKRATES-software SOWA OPAC, which stems from an improper neutralization of input issue that could result in...
VulnCheck KEV: CVE-2024-37472
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through = 5.4.8...
