1510 matches found
Microsoft Windows Remote Desktop Protocol 代码注入漏洞
A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Protocol RDP, an application used by Microsoft to connect to remote Windows desktops. The vulnerability stems from the failure of a networked system or product to properly filter special elements of code segments...
Microsoft Windows 输入验证错误漏洞
Microsoft Windows Fax services is a feature component service of Microsoft Corporation USA used to specify fax settings, including how to send, receive, view and print. A remote code execution vulnerability exists in Microsoft Windows Fax Compose Form, which is used to specify fax settings,...
PT-2022-3560 · Aethon · Tug Home Base Server
Name of the Vulnerable Software and Affected Versions: Aethon TUG Home Base Server versions prior to version 24 Description: The issue is related to the lack of input data sanitization in the "Reports" component of the TUG Home Base Server, which can allow a remote attacker to conduct a cross-sit...
Microsoft Excel 代码注入漏洞
Microsoft Office is a suite of office software products from Microsoft Corporation USA. Microsoft Office Excel is vulnerable to remote code execution. The vulnerability stems from the process of constructing code segments from external input data, where the network system or product fails to...
Microsoft Azure Site Recovery 输入验证错误漏洞
Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery is vulnerable to remote code execution. The vulnerability stems from the failure of a network system or product to properly filter special...
The vulnerability of the config_input function in the libavfilter/vf_gblur.c component of the multimedia library FFmpeg allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the configinput function in the libavfilter/vfgblur.c file of the FFmpeg multimedia library involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...
The vulnerability of component 2D of the Oracle GraalVM Enterprise Edition, which allows a hacker to trigger a service failure
The vulnerability of the 2D component of the Oracle GraalVM Enterprise Edition exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the ImageIO component in the Oracle GraalVM Enterprise Edition virtual machine allows a hacker to trigger a service failure.
The vulnerability of the ImageIO component in the Oracle GraalVM Enterprise Edition virtual machine exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability in the do_checksum function of the checksum.c component of the Pcap Tcpreplay editing and reproduction utility allows a hacker to cause a service failure.
The vulnerability of the dochecksum function in the checksum.c component of the Pcap Tcpreplay editing and reproduction utility involves copying buffers without checking the input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created...
The vulnerability of the DataTables table processing plugin, related to the lack of protection for website structure, allows attackers to compromise data integrity.
The vulnerability of the DataTables table processing plugin is related to incorrect handling of arrays in the input data. Exploiting this vulnerability allows an attacker to compromise the integrity of the data...
Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to gain privileged access
Vulnerability of the MySQL Cluster component: General database management system vulnerabilities in MySQL Cluster exist due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain privileged access remotely...
CVE-2021-44124
Hiby Music Hiby OS R3 Pro 1.5 and 1.6 is vulnerable to Directory Traversal. The HTTP Server does not have enough input data sanitization when shown data from SD Card, an attacker can navigate through the device's File System over HTTP...
Synology DiskStation Manager Injection Vulnerability (CNVD-2022-67835)
Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology Inc. of Taiwan, China. This operating system manages information such as data, files, photos, music, and more. An injection vulnerability exists in Synology DiskStation Manager, which...
The vulnerability of the software platform for developing and managing online stores Magento Commerce arises from insufficient validation of input data. This allows attackers to execute arbitrary code.
The vulnerability of the Magento Commerce software platform for developing and managing online stores exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
The vulnerability of the Windows operating system arises from insufficient validation of input data, allowing attackers to trigger a service failure.
The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a perpetrator to cause service failures...
Aternity SteelCentral AppInternals Remote Code Execution Vulnerability
Aternity SteelCentral AppInternals is a monitoring modern automation solution from Aternity, Inc. A remote code execution vulnerability exists in Aternity SteelCentral AppInternals, which stems from a failure of a network system or product to properly filter specific elements of external input da...
The vulnerability of the embedded software of NETGEAR routers such as D3600, D6000, D6100, D6220, D6400, D7800, D8500, DGN2200Bv4, DGN2200v4, R6250, R6300v2, R6400, R6400v2, R6700, R6700v3, R6900, R6900P, R7000, R7000P, R7100LG, R7300, R7900, R7900P, R8000, R8000P, R8300, R8500, WNDR3400v3, WNR3500Lv2, and XR500 lies in the absence of measures for cleaning input data. This allows a malicious actor to execute arbitrary commands.
The vulnerability of the embedded software of NETGEAR routers such as D3600, D6000, D6100, D6220, D6400, D7800, D8500, DGN2200Bv4, DGN2200v4, R6250, R6300v2, R6400, R6400v2, R6700, R6700v3, R6900, R6900P, R7000, R7000P, R7100LG, R7300, R7900, R7900P, R8000, R8000P, R8300, R8500, WNDR3400v3,...
The vulnerability of the embedded software of NETGEAR EX6120, EX6130, EX7000, EX7500, EX3700, EX3800, RBR850, RBS850, and RBK852 lies in the lack of measures for cleaning input data, allowing attackers to execute arbitrary commands.
The vulnerability of the embedded software of NETGEAR EX6120, EX6130, EX7000, EX7500, EX3700, EX3800, RBR850, RBS850, and RBK852 lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the built-in software of NETGEAR routers such as RBR20, RBR40, RBR50, RBS20, RBS40, RBR50, RBK20, RBK40, and RBK50 lies in the lack of measures for cleaning input data. This allows a hacker to execute arbitrary commands.
The vulnerability of the embedded software of NETGEAR routers such as RBR20, RBR40, RBR50, RBS20, RBS40, RBR50, RBK20, RBK40, and RBK50 lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...
The vulnerability of Windows operating systems arises from insufficient checking of input data, allowing attackers to disclose sensitive information that should be protected.
Vulnerabilities in Windows operating systems exist due to insufficient checking of input data. Exploiting these vulnerabilities can allow attackers to disclose protected information...