Input validation

Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Musi...

CVE-2019-14046

CVE-2019-14046 is a Qualcomm/Snapdragon vulnerability described as an out-of-bounds memory allocation during camera parameter validation across Snapdragon Auto, Compute, and related chips (QCS605, SDM439, SDX24). Connected sources (NVD/NVD family, Red Hat advisory, CVE listings, and Android bulle...

Nextcloud Server < 12.0.8, < 13.0.3 Improper Input Vulnerability (NC-SA-2018-003)

Nextcloud Server is prone to an improper input vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

JetBrains YouTrack Cross-Site Scripting Vulnerability (CNVD-2020-04345)

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A cross-site scripting vulnerability exists in JetBrains YouTrack. The vulnerability stems...

Input validation

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of requests sent to the web interface. An attacker could exploit this...

CVE-2013-0739: Improper Neutralization of Input During Web Page Generation

Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script...

CVE-2020-3147 Cisco Small Business Switches Denial of Service Vulnerability

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of requests sent to the web interface. An attacker could exploit this...

Authentication flaw

vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession function...

Microsoft Remote Desktop Gateway Multiple RCE Vulnerabilities (uncredentialed check)

Binary data microsoftrdgatewayrce.nbin...

CVE-2020-3134

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of zip files. An...

CVE-2019-16005

A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an authenticated, remote attacker to execute arbitrary commands on the affected system. The vulnerability is due to improper validation of user-supplied input by the web-based management interface of the...

Input validation

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of zip files. An...

Authentication flaw

Honor V30 smartphones with versions earlier than 10.0.1.135C00E130R4P1 have an improper authentication vulnerability. Certain applications do not properly validate the identity of another application who would call its interface. An attacker could trick the user into installing a malicious...

Piwigo Cross-Site Scripting Vulnerability (CNVD-2020-03256)

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A cross-site scripting vulnerability exists in Piwigo. The vulnerability stems from the lack of proper validation of client-side data ...

Exploit for Improper Certificate Validation in Microsoft

No d...

Electronic Logbook (ELOG) Cross-Site Scripting Vulnerability

ELOG is a web application written in C for creating personal and general logs. A cross-site scripting vulnerability exists in ELOG version 3.1.4. The vulnerability stems from the WEB application's lack of proper validation of client-side data. An attacker can exploit the vulnerability to execute...

CVE-2014-1454

Pearson eSIS Enterprise Student Information System message board has stored XSS due to improper validation of user input...

Design/Logic Flaw

Pearson eSIS Enterprise Student Information System message board has stored XSS due to improper validation of user input...

CVE-2014-1454

Pearson eSIS Enterprise Student Information System message board has stored XSS due to improper validation of user input...

CVE-2014-1454: Improper Neutralization of Input During Web Page Generation

Pearson eSIS Enterprise Student Information System message board has stored XSS due to improper validation of user input...