System Management Unit Disclosure

The vulnerability of the System Management Unit SMU component of AMD processors exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Eclipse Jetty Proxy Failure

The vulnerability of Eclipse Jetty servlet containers exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause failures in the proxy scenarios...

Windows Authentication Code Execution

The vulnerability of the Windows Authentication component in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted data...

Google TensorFlow buffer overflow vulnerability (CNVD-2022-80680)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A buffer overflow vulnerability exists in Google TensorFlow, which stems from tf.rawops.ResizeNearestNeighborGrad's lack of length size validation of the input data. validation, an attacker could exploi...

Windows Hyper-V DoS

The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2022-24903: A flaw in rsyslog TCP module could allow an attacker to craft a malicious message leading to a heap-based buffer overflow. (BSA-2022-2127)

Security Advisory ID: BSA-2022-2127 Component: Rsyslog Revision: 1.0 Rsyslog is vulnerable to remote code execution RCE due to improper validation of input data when octet-counted framing is used. An attacker could exploit this vulnerability by supplying a system with maliciously crafted messages...

Google Chrome Developer Tools Code Execution

The vulnerability of Google Chrome’s developer tools relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

MySQL Server InnoDB DoS

The vulnerability of the InnoDB component in the MySQL Database Management System exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

MySQL Server InnoDB DoS

The vulnerability of the InnoDB component of the MySQL Database Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Adobe Illustrator Code Execution

The vulnerability of the Adobe Illustrator graphic editor is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Office Online Server Code Execution

The vulnerability of the Office Online Server web server is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the target system...

AV1 Video Extension Code Execution

The vulnerability of the AV1 Video Extension codec is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...

Dell BIOS Code Execution

The vulnerability of BIOS microprogramming software in Dell laptops is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe Bridge Code Execution

The vulnerability of the Adobe Bridge file manager is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Intel Ethernet ixgbe driver DoS

The vulnerability of the Intel Ethernet ixgbe driver for Linux exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause service failures...

HEVC Video Extensions Code Execution

The vulnerability of HEVC Video Extensions relates to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Authenticode Signature Verification Code Execution

The vulnerability of the Authenticode signature verification function in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Windows Hyper-V Hardware Virtualization DoS

The vulnerability of the Windows Hyper-V hardware virtualization system of the Microsoft operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using specially created data...

Adobe Bridge Code Execution

The vulnerability of the Adobe Bridge file manager is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Core server component Oracle WebLogic Server Unauthorized Access

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...