CVE-2024-33041

Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,...

CVE-2024-33041 Use of Out-of-range Pointer Offset in Computer Vision

Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,...

CVE-2020-12487

Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege...

CVE-2020-12487 Command Execution Vulnerability in ABE service

Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege...

CVE-2020-12487 Command Execution Vulnerability in ABE service

Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege...

CVE-2020-12487

CVE-2020-12487 affects vivo ABE service. Description: flaw in verification of input parameters allows an attacker to craft commands that cause the ABE service to execute commands with root privileges. Documented exposure includes root-level command execution with an attack vector requiring user i...

PT-2024-38093 · Unknown · Dingo Dlibra

Name of the Vulnerable Software and Affected Versions: DInGO dLibra software versions 6.0 through 6.3.19 Description: The issue is related to improper neutralization of input during web page generation, allowing a Reflected Cross-Site Scripting XSS attack. This occurs in the filter parameter of t...

CVE-2024-51521

Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51521

Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51521

Summary (CVE-2024-51521): This entry concerns an input-parameter verification vulnerability in Huawei HarmonyOS’ background service module. The impact is availability disruption on successful exploitation, with several sources noting a laxity/type-checking issue in the background task/service com...

PT-2024-34684 · Unknown · Hdc Module

Name of the Vulnerable Software and Affected Versions: HDC module affected versions not specified Description: The issue is related to the lack of verification of input parameters in the HDC module. Successful exploitation of this vulnerability may affect availability. Recommendations: At the...

PT-2024-34685 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to an input parameter verification vulnerability in the background service module. Successful exploitation of this vulnerability may affect availability...

PT-2024-34702 · Wave · Wave

Name of the Vulnerable Software and Affected Versions: Wave version 2.0 Description: This issue is caused by improper or missing authorization checks on certain API endpoints. An authenticated remote attacker could exploit this by manipulating API input parameters to gain unauthorized access and...

CVE-2024-9322

A vulnerability was found in code-projects Supply Chain Management 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/editmanufacturer.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploi...

The vulnerability of the hashgen_main function (in the hashgen.cpp module) of the “Red Database” database management system allows a hacker to cause errors in the operation of the hashgen utility.

The vulnerability of the hashgenmain function in the hashgen.cpp module of the “Red Database” database management system is related to incorrect processing of input parameters from the hashgen utility. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the hashgen...

xfpt 安全漏洞

xfpt is a program by Philip Hazel, an individual developer. It converts a UTF-8 encoded tagged source document into an XML document. A security vulnerability exists in versions prior to xfpt 1.01 that stems from a failure to properly handle certain parameters in the input data, resulting in a...

GO-2022-0928 Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows

Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows...

apollo-portal has potential unauthorized access issue

Impact A vulnerability exists in the synchronization configuration feature that allows users to craft specific requests to bypass permission checks. This exploit enables them to modify a namespace without the necessary permissions. Patches The issue was addressed with an input parameter check in...

CVE-2024-43397

Apollo is a configuration management system. A vulnerability exists in the synchronization configuration feature that allows users to craft specific requests to bypass permission checks. This exploit enables them to modify a namespace without the necessary permissions. The issue was addressed wit...

CVE-2024-43397 Potential unauthorized access issue in apollo-portal

Apollo is a configuration management system. A vulnerability exists in the synchronization configuration feature that allows users to craft specific requests to bypass permission checks. This exploit enables them to modify a namespace without the necessary permissions. The issue was addressed wit...