Discourse Input Validation Error Vulnerability (CNVD-2022-05507)

Discourse is an open source community discussion platform. The platform includes community, email, and chat room features.Discourse is vulnerable to an input validation error that could be exploited to trigger a denial of service attack via the /message-bus/diagnostics path...

Digital Bazaar Forge 输入验证错误漏洞

Digital Bazaar Forge is a native implementation of Tls in Javascript and an open source tool for writing encryption-based and web-intensive web applications from Digital Bazaar, Inc. An input validation error vulnerability exists in Digital Bazaar Forge, which stems from the product allowing URL...

GLPI 操作系统命令注入漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

Apache Parquet Input Validation Error Vulnerability

Apache Parquet is a columnar storage format from the Apache Foundation in the United States. It can be used in any project in the Hadoop ecosystem. An input validation error vulnerability exists in Apache Parquet, which stems from the product's Parquet-MR not validating Parquet files. An attacker...

MediaTek 芯片 输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. An input validation error vulnerability exists in the MediaTek wifi driver, which originates in the wifi driver and may cause a system crash due to a lack of validation checks. This could lead to a remot...

MediaTek 芯片 输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. The MediaTek chips are vulnerable to an input validation error vulnerability that stems from a possible memory corruption due to an integer overflow in the mdp driver. This could result in a local...

Mediatek MediaTek 芯片 输入验证错误漏洞

MediaTek chips are various chips from MediaTek, a Chinese company MediaTek. The MediaTek chips suffer from an input validation error vulnerability that originates in libMtkOmxGsmDec, where information disclosure is possible due to incorrect boundary checking...

Mediatek MediaTek 芯片 输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company. MediaTek Chips An input validation error vulnerability exists, which stems from a possible information disclosure due to a lack of boundary checking in libvcodecdrv. This could lead to a local information disclosure without...

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Autofill, which can be exploited by attackers to bypass security restrictions...

Qualcomm 组件 输入验证错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. An intrinsic part that provides functionality to Qualcomm devices. A security vulnerability exists in the Qualcomm Component that originates from incorrect validation of memory regions in the Hypervisor can lead to incorrect regi...

Wireshark input validation error vulnerability

Wireshark formerly Ethereal is a set of network packet analysis software from the Wireshark team. Gryphon dissector is one of the Gryphon protocol parsers. An input validation error vulnerability exists in Wireshark, which stems from the product's failure to process Kafka messages effectively. An...

Sun & Moon Rise Shockwall system 输入验证错误漏洞

The Sun & Moon Rise Shockwall System is a computer endpoint protection system from Sun & Moon Rise, a Chinese company, that suffers from a security vulnerability that could be exploited to send malicious responses to servers to partially disrupt service...

WordPress plugin Stars Rating 输入验证错误漏洞

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Stars Rating Plugin has a denial of service vulnerability in versions prior to 3.5.1, which stems from a failure ...

Wireshark 输入验证错误漏洞

Wireshark formerly Ethereal is a set of network packet analysis software from the Wireshark team. Gryphon dissector is one of the Gryphon protocol parsers. An input validation error vulnerability exists in Wireshark, which stems from the product's failure to process Kafka messages effectively. An...

Delta Electronics DIAEnergie SQL Injection (CVE-2021-38391)

An SQL injection exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to an input validation error when processing the type parameter in the AMHandler.ashx endpoint...

Delta Electronics DIAEnergie SQL Injection (CVE-2021-32983)

An SQL injection exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to input validation error when processing keyword parameter in HandlerCFG.ashx endpoint...

Google Android Input Validation Error Vulnerability (CNVD-2021-103431)

Google Android is a Linux-based open source operating system from Google, Inc. An input validation error vulnerability exists in Google Android, which can be exploited by attackers to obtain sensitive information about affected components...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-33132)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. SAP 3D Visual Enterprise Viewer version 9.0 is...

ZTE BigVideo Analysis product 输入验证错误漏洞

ZTE Big Video Analysis Product is a big video analysis product from China's ZTE Corporation ZTE. The ZTE BigVideo Analysis product suffers from an input validation error vulnerability that originates from inconsistent forward and reverse validation when configuring a big screen page, which can be...

Huawei HarmonyOS Input Validation Error Vulnerability (CNVD-2022-01676)

Huawei HarmonyOS is an operating system from Huawei China Inc. A vulnerability exists in the Huawei HarmonyOS component due to an input validation error. The vulnerability stems from a network system or product that does not properly validate input data, and can be exploited by an attacker to...