CVE-2022-40539 Improper Validation of Array Index in Automotive Android OS

Memory corruption in Automotive Android OS due to improper validation of array index...

CVE-2022-40539

CVE-2022-40539 affects Automotive Android OS on Qualcomm-based platforms. Root cause is memory corruption due to improper validation of an array index in the affected component/file. Documented impact is high (confidentiality, integrity, availability) with local, low-effort access required and no...

CVE-2022-33256 Improper validation of array index in Multi-mode call processor

Memory corruption due to improper validation of array index in Multi-mode call processor...

WordPress plugin WooCommerce Checkout Field Manager 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Social Sharing is a social sharing plugin used in it.WordPress plugin is an applicatio...

Input validation

authentik is an open-source Identity Provider. Due to an insufficient access check, a recovery flow link that is created by an admin or sent via email by an admin can be used to set the password for any arbitrary user. This attack is only possible if a recovery flow exists, which has both an...

CVE-2023-26481 Insufficient user check in FlowTokens by Email stage

authentik is an open-source Identity Provider. Due to an insufficient access check, a recovery flow link that is created by an admin or sent via email by an admin can be used to set the password for any arbitrary user. This attack is only possible if a recovery flow exists, which has both an...

CVE-2023-26481 Insufficient user check in FlowTokens by Email stage

authentik is an open-source Identity Provider. Due to an insufficient access check, a recovery flow link that is created by an admin or sent via email by an admin can be used to set the password for any arbitrary user. This attack is only possible if a recovery flow exists, which has both an...

The vulnerability of the v4l2_m2m_querybuf function in the v4l2-mem2mem.c component of the Linux operating system allows a hacker to cause a service failure, increase their privileges, or execute arbitrary code.

The vulnerability of the v4l2m2mquerybuf function in the v4l2-mem2mem.c component of the Linux operating system is related to writing beyond the buffer limit due to incorrect input validation. Exploiting this vulnerability can allow an attacker to cause system failures, gain elevated privileges, ...

CVE-2020-5002 IBM Financial Transaction Manager security bypass

IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions due to improper validation. IBM X-Force ID: 192954...

CVE-2023-27292

An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...

Remote Code Execution (RCE)

apacheairflowprovidersgoogle is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper validation for th cloud sql provider parameter in the downloadsqlproxyifneeded function of cloudsql.py which allows an attacker to upload and execute malicious code on the system...

CVE-2023-27292

An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...

CVE-2023-27292

An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...

CVE-2023-27292

OpenCATS (OpenCATS) has an open redirect vulnerability (CVE-2023-27292) caused by improper validation of user-supplied GET parameters, with potential exposure to template injection and related data access/modification risks. The Nuclei template confirms the issue as an open redirect, describing i...

PTC ThingWorx Edge

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: PTC Equipment: ThingWorx Edge Vulnerabilities: Improper Validation of Array Index, Integer Overflow or Wraparound 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

CVE-2023-0755

The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code...

CVE-2023-0755

The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code...

K15580: Apache CXF and JBoss vulnerabilities

Security Advisory Description CVE-2010-2076 Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, Apache jUDDI, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows...

K54635192: Linux kernel overlayfs vulnerability CVE-2021-3493

Security Advisory Description The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the...

Input validation

Improper Validation of Certificate with Host Mismatch vulnerability in Gotham Chat IRC helper of Palantir Gotham allows A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack would allow them to intercept...