webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution

A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient input validation, which attackers could exploit to execute malicious code on affected systems...

The vulnerability of the Network File System (NFS) of the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Windows Network File System NFS exists due to insufficient checks on input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the BusyBox command-line utility’s set of tools is related to errors in checking input records of PTR DNS, which are displayed by the netstat utility. This vulnerability allows a hacker to execute arbitrary shell commands on the target system.

The vulnerability of the BusyBox command-line utility is related to errors in checking input records of PTR DNS, which are displayed by the netstat utility, if it is executed on a terminal compatible with VT. Exploiting this vulnerability allows an attacker to execute arbitrary shell commands on...

The vulnerability of the Oracle Database - Enterprise Edition Data Redaction component of the Oracle Database Server system allows attackers to gain access to modify, add, or delete data.

The vulnerability of the Enterprise Edition Data Redaction component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data...

Qualcomm 芯片输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits including primarily semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. An input validation error vulnerability exists in...

The vulnerability of the packet-processing function in the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system allows a hacker to trigger a service failure.

The vulnerability of the packet-processing function in the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system is related to insufficient verification of the specified type of input data. Exploiting this...

The vulnerability of the Windows Network File System (NFS) allows a hacker to execute arbitrary code.

The vulnerability of the Windows Network File System NFS exists due to insufficient checks on input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the do_soap_call function (ext/soap/soap.c) in the PHP programming language allows a hacker to gain access to protected information.

The vulnerability of the dosoapcall function ext/soap/soap.c in the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain access to protected information...

Cross site scripting

It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting XSS attack. It was noted that the Metric parameter does not have any input checks on the user input that allows an attacker to craft its own malicious payload to trigger a XSS vulnerability...

CVE-2022-24707 SQL injection in anuko timetracker

Anuko Time Tracker is an open source, web-based time tracking application written in PHP. UNION SQL injection and time-based blind injection vulnerabilities existed in Time Tracker Puncher plugin in versions of anuko timetracker prior to 1.20.0.5642. This was happening because the Puncher plugin...

Lack of input checks (withrawal penalties should always be greater than 0)

Handle pedroais Vulnerability details Impact If penalties are set to 0 the protocol would be vulnerable to price manipulations like the one described in the contest documentation. Proof of Concept The protocol uses economic penalties to punish withdraws to protect against economic price...

CVE-2021-37594

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSSIZE File Contents Request PDU...

CVE-2021-37594

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSSIZE File Contents Request PDU...

CVE-2021-37594

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSSIZE File Contents Request PDU...

CVE-2021-37594

CVE-2021-37594 affects FreeRDP prior to 2.4.0 on Windows. The flaw is in wf_cliprdr_server_file_contents_request (client/Windows/wf_cliprdr.c), where input checks are missing for a FILECONTENTS_SIZE File Contents Request PDU. This weak input validation could enable an attacker to misuse the clipb...

CVE-2021-37594

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSSIZE File Contents Request PDU...

CVE-2021-37595

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSRANGE File Contents Request PDU...

CVE-2021-37595

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSRANGE File Contents Request PDU...

CVE-2021-37595

The CVE-2021-37595 entry affects FreeRDP prior to 2.4.0 on Windows. The vulnerability is in wf_cliprdr_server_file_contents_request (file contents PDU) within client/Windows/wf_cliprdr.c, where missing input checks allow improper handling of FILECONTENTS_RANGE requests. This weakness could enable...

Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2021-50188)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. Aruba ClearPass Policy Manager suffers from a command injection vulnerability that originates from the product's failure to perform security checks on user input...