Nextcloud Input Validation Error Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud is vulnerable to an input validation error. The vulnerability originates from a network system or product that does not properly validate incoming...

Multiple Siemens Products Input Validation Error Vulnerability (CNVD-2020-23037)

Siemens Scalance X-200 is an industrial Ethernet switch from Siemens, Germany. An input validation error vulnerability exists in multiple Siemens products, which can be exploited by attackers to hijack click-through actions by other users...

IBM MQ Input Validation Error Vulnerability (CNVD-2020-13051)

IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. An input validation error vulnerability exists in IBM MQ version 9.0 LTS, version 8.0 and IBM MQ Appliance versi...

IBM MQ Input Validation Error Vulnerability (CNVD-2020-13052)

IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. An input validation error vulnerability exists in IBM MQ and IBM MQ Appliance. An attacker could exploit this...

IBM MQ Appliance Input Validation Error Vulnerability

The IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM USA. An input validation error vulnerability exists in the IBM MQ Appliance. The vulnerability originates from a network system or product that does not properly validate incomin...

Python Input Validation Error Vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. An input validation error vulnerability exists in Python. The vulnerability originates from a networked...

Multiple Qualcomm Products Input Validation Error Vulnerability (CNVD-2020-09961)

Qualcomm SDX24 and others are products of Qualcomm Incorporated, U.S.A. The SDX24 is a modem.The QCS605 is a central processing unit CPU product.The SDM439 is a central processing unit CPU product.The QCS605 is a central processing unit CPU product.The QCS605 is a central processing unit CPU...

F5 BIG-IP Input Validation Error Vulnerability (CNVD-2020-10452)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security vulnerability exists in F5 BIG-IP. The vulnerability stems from a network system or product that does not properly...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-09966)

Qualcomm SDX24 and others are products of Qualcomm Incorporated, U.S.A. The SDX24 is a modem.The SDM630 is a central processing unit CPU product.The SDM660 is a central processing unit CPU product.The SDM660 is a central processing unit CPU product.The SDM660 is a central processing unit CPU...

Joyent Node.js Input Validation Error Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

PHP 7.2.x < 7.2.27 / PHP 7.3.x < 7.3.14 / 7.4.x < 7.4.2 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is either 7.2.x prior to 7.2.27, 7.3.x prior to 7.3.14, or 7.4.x prior to 7.4.2. It is, therefore, affected by multiple vulnerabilities: - An buffer overflow on the mbflfiltconvbig5wchar function. An unauthenticated,...

PHP 7.4.x < 7.4.1 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is prior to 7.2.26, 7.3.x prior to 7.3.13, or 7.4.x prior to 7.4.1. It is, therefore, affected by multiple vulnerabilities: - An arbitrary file read vulnerability exists in link and DirectoryIterator class due to imprope...

WordPress Resim ara 1.0 Cross Site Scripting

Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Resim ara 1.0 Resim ara is prone to a reflected cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Kunbus PR100088 Modbus Input Validation Error Vulnerability

Kunbus PR100088 Modbus is an industrial Ethernet gateway device from Kunbus, Germany. An input validation error vulnerability exists in versions prior to Kunbus PR100088 Modbus Release R02. The vulnerability stems from the network system or product not properly validating input data. No details o...

GE PACSystems Input Validation Error Vulnerability

GE PACSystems is a GE programmable automation controller product. GE PACSystems has an input validation error vulnerability that can be exploited by an attacker to cause a denial of service...

Serpico Input Validation Error Vulnerability

Serpico is a penetration test report generation and collaboration tool. An input validation error vulnerability exists in Serpico version 1.3.0, which arises from a networked system or product that does not properly validate incoming data and can be exploited by an attacker to add an unlimited...

PHP 7.2.x < 7.2.26 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 7.2.x prior to 7.2.26. It is, therefore, affected by multiple vulnerabilities: - An arbitrary file read vulnerability exists in link and DirectoryIterator class due to improper handling of embedded \0 byte character a...

PHP 7.3.x < 7.3.13 / 7.4.x < 7.4.1 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 7.3.x prior to 7.3.13 or 7.4.x prior to 7.4.1. It is, therefore, affected by multiple vulnerabilities: - An arbitrary file read vulnerability exists in link and DirectoryIterator class due to improper handling of...

Determine Contract Lifecycle Management Input Validation Error Vulnerability

Determine Contract Lifecycle Management CLM is a suite of enterprise contract lifecycle management solutions from Determine Corporation. An input validation error vulnerability in the reportedit.jsp file in Determine CLM v5.4 can be exploited by an attacker to execute arbitrary code on this...

MediaWiki Input Validation Error Vulnerability (CNVD-2020-00008)

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. An input validation error vulnerability exists in MediaWiki version 1.33.1 an...