PT-2025-2403 · Phoenix · Phoenix Securecore™ For Intel Coffee Lake +1

Name of the Vulnerable Software and Affected Versions: Phoenix SecureCore™ for Intel Kaby Lake versions prior to 4.0.1.1012 Phoenix SecureCore™ for Intel Coffee Lake versions prior to 4.1.0.568 Phoenix SecureCore™ for Intel Comet Lake versions prior to 4.2.1.292 Phoenix SecureCore™ for Intel Ice...

Phoenix SecureCore 代码问题漏洞

Phoenix SecureCore is a computer based input/output system from Phoenix Contact Phoenix of Germany. A code issue vulnerability exists in Phoenix SecureCore that arises from an improperly checked exception or anomaly that allows input data manipulation...

The vulnerability of the Framework component of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Framework component in the Android operating system relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2021-22501

OpenText Operations Bridge Manager is affected by CVE-2021-22501 due to an Improper Restriction of XML External Entity References. The vulnerability affects OpBridge Manager versions 2017.05 through 2020.10 and can lead to Input Data Manipulation with potential disclosure of confidential informat...

CVE-2021-22501

Improper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations Bridge Manager allows Input Data Manipulation. The vulnerability could be exploited to confidential information This issue affects Operations Bridge Manager: 2017.05, 2017.11, 2018.05, 2018.11, 2019.05,...

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...

Netgear R6900 Buffer Overflow Vulnerability

The Netgear R6900 is a wireless router from NETGEAR. The Netgear R6900 suffers from a buffer overflow vulnerability that originates from the parameter Content-Length in the file upgradecheck.cgi that fails to properly validate the length of the input data, which can be exploited by an attacker to...

CVE-2024-11950

XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of XnSoft XnView Classic. User interaction is required to exploit this vulnerability in that the target must...

php: Erroneous parsing of multipart form data

A flaw was found in PHP's parsing of multipart form data contents, which affects both file and input form data. This may lead to legitimate data not being processed, violating data integrity. For example, if a multipart form data payload contains a valid prefix 'X' of the defined boundary B such...

The vulnerability of the microprogramming software for Schneider Electric’s programmable logic controllers (PLC) models M241, M251, M258, and LMC058 is related to errors in processing input data. This vulnerability allows attackers to trigger maintenance failures and compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the microprogrammed software of Schneider Electric’s programmable logic controllers PLC models M241, M251, M258, and LMC058 is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to trigger maintenance failures and compromise the...

The vulnerability of the tipc component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the tipc component in the Linux operating system’s kernel is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of microprogrammed software in embedded network control controllers for building automation systems, such as ASPECT Enterprise, NEXUS Series, and MATRIX Series, arises from improper validation of certain types of input data. This allows unauthorized access by attackers to the device.

The vulnerability of microprogrammed software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to improper validation of certain types of input data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized acces...

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series systems arises from improper validation of certain types of input data. This allows attackers to gain access to the project’s backup copies.

The vulnerability of microprogrammed software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series buildings is related to improper validation of certain types of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain...

The vulnerability of the Qlik Sense Enterprise data analysis platform, related to errors in processing input data from higher-level components, allows a perpetrator to execute arbitrary code.

The vulnerability of the Qlik Sense Enterprise data analysis platform is related to errors in processing input data from higher-level components. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by creating specially crafted connection objects remotely...

The vulnerability of the qca component in the Linux operating system’s kernel allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the qca component in the Linux operating system’s kernel is related to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to trigger a Denial-of-Service attack...

ROS-20241203-14

Squid proxy server vulnerability is related to errors in input data processing. Exploitation of the vulnerability could allow a remote attacker to cause a denial of service by sending specially crafted ESI packets. specially crafted ESI packets...

The vulnerability of the microprogramming software in the Server Board S2600BP Family exists due to insufficient verification of input data. This allows attackers to increase their privileges.

The vulnerability of the microprogramming software in the Server Board S2600BP Family exists due to insufficient verification of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the microprogramming software in the Server Board S2600BPBR Family exists due to insufficient verification of input data. This allows attackers to escalate their privileges.

The vulnerability of the microprogramming software in the Server Board S2600BPBR Family exists due to insufficient verification of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the deployment and model management software for deep learning in the Intel Distribution of OpenVINO Model Server lies in insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the deployment and model management software for deep learning in the Intel Distribution of OpenVINO Model Server is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Intel Computing Improvement Program (Intel CIP) data collection tool, related to insufficient verification of input data, allows attackers to enhance their privileges.

The vulnerability of the data collection tool under the Intel Computing Improvement Program Intel CIP is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...