1703 matches found
The vulnerability of microprogrammed software in programmable logic controllers SIMATIC S7-1200, related to improper verification of syntax correctness in input data, allows a intruder to cause malfunctions during maintenance operations.
The vulnerability of microprogrammed software in programmable logic controllers SIMATIC S7-1200 is related to improper verification of syntax correctness in input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause malfunctions in the system...
CVE-2026-22712: Improper Encoding or Escaping of Output
Improper Encoding or Escaping of Output due to magic word replacement in ParserAfterTidy vulnerability in The Wikimedia Foundation Mediawiki - ApprovedRevs Extension allows Input Data Manipulation.This issue affects Mediawiki - ApprovedRevs Extension: 1.45, 1.44, 1.43, 1.39...
Mediawiki - ApprovedRevs Extension 安全漏洞
Mediawiki - ApprovedRevs Extension is an open source content quality control plugin for Mediawiki. A security vulnerability exists in Mediawiki - ApprovedRevs Extension versions 1.45, 1.44, 1.43, and 1.39, which stems from improper output encoding or escaping, and could lead to input data...
CVE-2025-47335 Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while parsing clock configuration data for a specific hardware type...
The vulnerability of the SAP Business Planning and Consolidation solution for managing financial indicators allows a perpetrator to trigger a service failure.
The vulnerability of the SAP Business Planning and Consolidation solution for managing financial indicators is related to the lack of verification of input data for cyclical operations. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Splunk Enterprise platform for operational analysis, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.
The vulnerability of the Splunk Enterprise platform for operational analysis is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
The vulnerability of the IBM Planning Analytics Local software lies in its improper checking of syntax correctness during input processing, allowing an attacker to gain unauthorized access to protected information.
The vulnerability of the IBM Planning Analytics Local software is related to improper verification of syntax correctness in input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20251223-7307
Vulnerability in python3 related to incorrect validation of a specified index, position or offset in input data. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20251223-7309
Vulnerability in python3.11 related to incorrect validation of a specified index, position or offset in input data. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
The vulnerability of the Pdfinfo component in the Poppler PDF rendering library allows a attacker to cause a service failure.
The vulnerability of the Pdfinfo component in the Poppler PDF rendering library is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2025-34450
The CVE-2025-34450 entry affects merbanan/rtl_433 up to version 25.02 and before commit 25e47f8. The root cause is a stack-based buffer overflow in parse_rfraw() located in src/rfraw.c when processing crafted or oversized raw RF input, leading to memory corruption or a crash. Impact is described ...
PT-2025-52352
Name of the Vulnerable Software and Affected Versions merbanan/rtl 433 versions up to and including 25.02 and prior to commit 25e47f8 Description The software contains a stack-based buffer overflow in the parse rfraw function, located in src/rfraw.c. Processing crafted or excessively large raw RF...
The vulnerability of the input/output hardware module of Rockwell Automation FLEX 5000 IO (5094-IF8) arises from insufficient verification of the specified type of input data. This vulnerability allows a malicious actor to trigger a service failure.
The vulnerability of the input/output hardware module of Rockwell Automation FLEX 5000 IO 5094-IF8 is related to insufficient verification of the specified type of input data. Exploiting this vulnerability can allow a malicious actor to cause maintenance failures remotely...
The vulnerability of the software for deploying and executing AI models with NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) allows a malicious actor to trigger a service failure. This vulnerability stems from improper checking of the data size at the input stage.
The vulnerability of the software for deploying and executing AI models developed by NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to improper checking of the amount of data at input. Exploiting this vulnerability can allow a malicious actor to cause...
The vulnerability of the embedded software for DGN2200v4 lies in insufficient validation of input data, allowing a hacker to execute arbitrary code.
The vulnerability of the embedded software for DGN2200v4 lies in insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of TP-Link TL-WR940N V6’s microprogramming software, related to insufficient validation of input data, allows a hacker to trigger a service failure.
The vulnerability of TP-Link TL-WR940N V6 router’s microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of RUGGEDCOM ROS Ethernet switch microprogramming software, related to insufficient validation of input data, allows a intruder to trigger a service failure.
The vulnerability of the microprogrammed Ethernet switch software from RUGGEDCOM ROS is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the mm/userfaultfd.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the mm/userfaultfd.c component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to cause service failures...
The vulnerability of the Mobile VPN client with SSL Client for Windows operating systems arises from the lack of measures to sanitize input data at the management level. This allows attackers to increase their privileges.
The vulnerability of the Mobile VPN client with SSL Client for Windows operating systems is related to the lack of measures for securing input data at the management level. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the ColdFusion software platform, related to insufficient validation of input data, allows attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...