Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Go

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Go. Vulnerability Details CVEID:CVE-2022-24921 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by improper input validation. By using a specially-crafted deeply nested expression, a remote...

Input validation

In Linaro Automated Validation Architecture LAVA before 2022.10, there is dynamic code execution in lavaserver/lavatable.py. Due to improper input sanitization, an anonymous user can force the lava-server-gunicorn service to execute user-provided code on the server...

CVE-2022-34391

Dell Client BIOS Versions prior to the remediated version contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2022-32483

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable...

CVE-2022-32488

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

PT-2022-21341 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to improper input validation in Dell BIOS, which could be exploited by a local authenticated malicious user. This exploitation could potentially lead to arbitrary cod...

PT-2022-21338 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to improper input validation. A local authenticated malicious user with admin privileges may potentially exploit this to modify a UEFI variable. Recommendations: At t...

Juniper Junos OS Vulnerability (JSA69884)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69884 advisory. - An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker...

PT-2022-21340 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to improper input validation in Dell BIOS, which can be exploited by a local authenticated malicious user. This exploitation can occur through the use of a System...

PT-2022-5241 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 21.1R3-S2 Juniper Networks Junos OS versions prior to 21.2R3-S1 Juniper Networks Junos OS versions prior to 21.3R3 Juniper Networks Junos OS versions prior to 21.4R2 Juniper Networks Junos OS versio...

PT-2022-22158 · Dell · Dell Client Bios

Name of the Vulnerable Software and Affected Versions: Dell Client BIOS versions prior to the remediated version Description: The issue is related to improper input validation, which could be exploited by a local authenticated malicious user. This exploitation could potentially lead to arbitrary...

CVE-2022-32486

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

Security Bulletin: IBM App Connect Enterprise is vulnerable to Improper Input Validation due to electron (CVE-2022-29257)

Summary IBM App Connect Enterprise is vulnerable to Improper Input Validation due to electron CVE-2022-29257. Electron is used for Discovery Connectors in IBM App Connect Enterprise. The latest fix pack includes electron 19.0.10. Vulnerability Details CVEID:CVE-2022-29257 DESCRIPTION: Node.js...

Siemens SIMATIC HMI Panels

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC Human Machine Interface HMI Panels Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a...

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows unified access to data from a variety of sources.A remote code execution vulnerability exists in Microsoft OLE DB Provider for SQL Server, which stems from An attacker can exploit the vulnerability to cause...

Siemens SCALANCE and RUGGEDCOM Devices

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens LOGO! 8 BM Devices

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment : LOGO! 8 BM Devices Vulnerabilities: Buffer Copy without Checking Size of Input; Improper Input Validation; Improper Validation of Specified Index, Position, or Offset in Input. 2...

SUSE SLES12 Security Update : xmlgraphics-commons (SUSE-SU-2022:3550-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3550-1 advisory. - Update to version 2.6 - CVE-2020-11988: Fixed a server-side request forgery caused by improper input validation by the XMPParser. bsc28160...

Exploit for Improper Input Validation in Adobe Commerce

CVE-2022-24086 PoC of CV...

PUB-A-211485702

In smcintcrequestfiq of armgic.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...