CVE-2024-51520

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51520

CVE-2024-51520 corresponds to a vulnerability in Huawei HarmonyOS where the HDC module does not verify inbound input parameters. Affected component: HDC module within HarmonyOS. Root cause: lack of verification of input parameters, leading to potential availability impact. Impact: CVSS indicates ...

CVE-2024-51519

CVE-2024-51519 describes a vulnerability in Huawei HarmonyOS where the HDC module does not properly verify input parameters. Reported impact is potential denial of service affecting availability. Public details are limited; affected versions and a fix are not specified in the provided documents. ...

CVE-2024-51519

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51519

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-38407

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver...

PT-2024-38680 · Unknown · Itsourcecode Billing System

Name of the Vulnerable Software and Affected Versions: itsourcecode Billing System version 1.0 Description: A critical issue affects the processing of the file /addclient1.php, where the manipulation of the arguments lname, fname, mi, address, contact, meterReader leads to SQL injection. The atta...

CVE-2023-27335 Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability

Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. User interaction is required to exploit this vulnerability in that the target must visi...

CVE-2023-27335 Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability

Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. User interaction is required to exploit this vulnerability in that the target must visi...

CVE-2024-30845

Cross Site Scripting vulnerability in Rainbow external link network disk v.5.5 allows a remote attacker to execute arbitrary code via the validation component of the input parameters...

PT-2024-23629 · Rainbow · Rainbow

Name of the Vulnerable Software and Affected Versions: Rainbow external link network disk version 5.5 Description: The issue allows a remote attacker to execute arbitrary code via the validation component of the input parameters. This is a Cross Site Scripting vulnerability. Recommendations: For...

CVE-2024-30845

A Cross Site Scripting (XSS) vulnerability exists in Rainbow external link network disk v.5.5 , a PHP-based network disk and external link sharing program. A remote attacker can achieve arbitrary code execution by exploiting the validation component of the input parameters . To mitigate risk, it ...

CVE-2023-52364

Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful exploitation of this vulnerability may cause out-of-bounds write...

CVE-2023-52364

Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful exploitation of this vulnerability may cause out-of-bounds write...

CVE-2023-52364

Huawei EMUI and Huawei HarmonyOS are affected by a vulnerability in the RSMC module caused by a lack of strict verification for input parameters, specifically an in-parameter checksum vulnerability . Successful exploitation of this flaw may result in an out-of-bounds write . No specific affected ...

PT-2024-14554 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves the vulnerability of input parameters not being strictly verified in the RSMC module. Successful exploitation of this issue may cause...

Integer Overflow

gtkwave is vulnerable to Integer Overflow. The vulnerability is due to insufficient input validation and bounds checking within th VZT vztrdblockvchdecode dictionary parsing functionality in .vzt file allow attackers to manipulate certain input parameters, particularly numtimeticks...

GHSA-HFRG-4JWR-JFPJ Improper HTML sanitization in ZITADEL

Impact ZITADEL uses Go templates to render the login UI. Due to a improper use of the text/template instead of the html/template package, the Login UI did not sanitize input parameters. An attacker could create a malicious link, where he injected code which would be rendered as part of the login...

CVE-2024-20262

A vulnerability in the Secure Copy Protocol SCP and SFTP feature of Cisco IOS XR Software could allow an authenticated, local attacker to create or overwrite files in a system directory, which could lead to a denial of service DoS condition. The attacker would require valid user credentials to...

BIT-ARGO-WORKFLOWS-2021-37914

In Argo Workflows through 3.1.3, if EXPRESSIONTEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to disrupt a workflow because expression template output is evaluated...