CVE-2021-37595

The CVE-2021-37595 entry affects FreeRDP prior to 2.4.0 on Windows. The vulnerability is in wf_cliprdr_server_file_contents_request (file contents PDU) within client/Windows/wf_cliprdr.c, where missing input checks allow improper handling of FILECONTENTS_RANGE requests. This weakness could enable...

CVE-2021-37595

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSRANGE File Contents Request PDU...

CVE-2021-37595

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSRANGE File Contents Request PDU...

PT-2021-21726

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.4.0 Description The issue is related to missing input checks for a FILECONTENTS SIZE File Contents Request PDU in the wf cliprdr server file contents request function in client/Windows/wf cliprdr.c. This affects...

PT-2021-21727

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.4.0 Description The issue is related to missing input checks for a FILECONTENTS RANGE File Contents Request PDU in the wf cliprdr server file contents request function in client/Windows/wf cliprdr.c. This affects...

Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2021-50188)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. Aruba ClearPass Policy Manager suffers from a command injection vulnerability that originates from the product's failure to perform security checks on user input...

Aruba ClearPass Policy Manager 命令注入漏洞

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. Aruba ClearPass Policy Manager suffers from a command injection vulnerability that originates from the product's failure to perform security checks on user input...

CVE-2021-22760

A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing checks of user-supplied input data, when a malicious CGF file is imported to IGSS Definition...

CVE-2021-22760

A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing checks of user-supplied input data, when a malicious CGF file is imported to IGSS Definition...

The vulnerability of the constantinople application software of Avrora Center lies in the insufficient checking of input data, allowing attackers to execute arbitrary code.

The vulnerability of the constantinople application software of Avrora Center is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the mDNS forwarding function in Cisco Aironet Access Points’ software allows a attacker to induce a service failure.

The vulnerability of the mDNS forwarding function in Cisco Aironet Access Points’ software relates to insufficient checks on incoming mDNS traffic. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using specially crafted mDNS packets...

Buffer Overflows

bsdiff:sid is vulnerable to buffer overflows. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries...

PT-2021-16547 · Samsung · Samsung Internet

Name of the Vulnerable Software and Affected Versions: Samsung Internet versions prior to 13.2.1.46 Description: The issue is related to an improper input check in Samsung Internet, which allows attackers to launch non-exported activity in Samsung Browser via a malicious deeplink. Recommendations...

CVE-2020-36199

TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several places...

CVE-2020-36199

CVE-2020-36199 affects TinyCheck prior to commits 9fd360d and ea53de8. The root cause is insufficient validation of input parameters, enabling potential command injection. CVSS metrics indicate high to critical severity (CVSS2: 7.5 HIGH; CVSS3.1: 9.8 CRITICAL). The provided documents do not speci...

The vulnerability of Windows operating system installers allows a hacker to increase their privileges.

The vulnerability of Windows operating system installers exists due to insufficient checks on input data. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2020-9091

Taurus-AN00B versions earlier than 10.1.0.156C00E155R7P2 have an out-of-bounds read and write vulnerability. Some functions do not verify inputs sufficiently. Attackers can exploit this vulnerability by sending specific request. This could compromise normal service of the affected device...

DEBIAN-CVE-2020-14315

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries...

UBUNTU-CVE-2020-14315

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries...

The vulnerability of the ReadDIBImage function in the GraphicsMagick graphics editor arises from insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of the ReadDIBImage function in the GraphicsMagick graphics editor is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using a specially created dib file...