The vulnerability in Intel NUC’s built-in software exists due to insufficient testing of input data, allowing attackers to exploit their privileges.

The vulnerability of Intel NUC’s built-in software exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Wiser Smart programmable logic controllers from Schneider Electric, Wiser Controller EER21000 and Wiser Controller EER21001, related to insufficient validation of input data, allows attackers to exploit this to increase their privileges.

The vulnerability of the Wiser Smart programmable logic controllers from Schneider Electric, Wiser Controller EER21000 and Wiser Controller EER21001, relates to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to enhance their privileges through a...

CVE-2022-28948

A flaw was found in the Unmarshal function in Go-Yaml. This vulnerability results in program crashes when attempting to convert or deserialize invalid input data, potentially impacting system stability and reliability...

The vulnerability of the DirectShow component in Windows operating systems, related to insufficient input data validation, allows attackers to execute arbitrary code.

The vulnerability of the DirectShow component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the CPU FX5U(C) and FX5UJ modules of MELSEC iQ-F series PLCs, which stems from insufficient input data verification, allows attackers to trigger malfunctions during maintenance operations.

The vulnerability of the CPU FX5UC and FX5UJ modules of the MELSEC iQ-F series is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system...

ROS-20220530-03

Vulnerability of Array method of Mozilla Firefox and Mozilla Firefox ESR browsers and Thunderbird mail client is related to code generation errors. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary JavaScript code. remotely to execute arbitrary...

The vulnerability of the Microsoft.NET Framework software, related to insufficient validation of input data, allows a perpetrator to cause service failures.

The vulnerability of the Microsoft.NET Framework is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Windows Graphics component in Microsoft Windows operating systems arises from insufficient input data validation, allowing attackers to execute arbitrary code.

The vulnerability of the Windows Graphics component in Microsoft Windows systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Stored XSS vulnerability in Jenkins brakeman Plugin

brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability. This vulnerability can be exploited by users able to control the Brakeman post-build step input data.\n\nbrakeman Plugin 0.13 escap...

GHSA-RJ7P-RFGP-852X Loop with Unreachable Exit Condition in Apache Thrift

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

The vulnerability of TP-Link Tapo C200’s microprogrammed software lies in the lack of measures to clean incoming data inputs, allowing a intruder to gain full control over the device.

The vulnerability of TP-Link Tapo C200 IP camera’s microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to gain full control over the device...

The vulnerability of the Fax Service in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Fax Service in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by transmitting specially crafted data...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute cross-site scripting (XSS) attacks.

The vulnerability in the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures to protect input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...

Microsoft Visual Studio Remote Code Execution Vulnerability (CNVD-2022-60134)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. A remote code execution vulnerability exists in Microsoft Visual Studio that originates when a...

Microsoft Visual Studio Code Remote Code Execution Vulnerability (CNVD-2022-60132)

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in Microsoft Visual Studio Code, which arises from a failure of a networked system or product to properly filter specific elements of externally entered data during the...

Microsoft Windows Remote Procedure Call Runtime Remote Code Execution Vulnerability

Microsoft Windows Remote Procedure Call Runtime is a technology used to create distributed client/server programs from Microsoft Corporation USA.Microsoft Windows Remote Procedure Call Runtime is vulnerable to remote code execution vulnerability. The vulnerability stems from the failure of a...

OESA-2022-1651 zlib security update

Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms. Security Fixes: zlib before 1.2.12 allows memory corruption when deflating i.e....

The vulnerability of the Solaris operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the Solaris operating system’s kernel exists due to insufficient checks on input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Solaris operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the Solaris operating system’s kernel exists due to insufficient checks on input data. Exploiting this vulnerability can allow an attacker to cause service failures...