Apache Zeppelin Input Validation Error Vulnerability (CNVD-2024-17934)

Apache Zeppelin is a Web-based open source laptop application from the Apache USA Foundation. The program supports interactive data analysis and collaborative documentation. Apache Zeppelin suffers from an input validation error vulnerability that can be exploited by an attacker to view a server...

AnythingLLM 输入验证错误漏洞

AnythingLLM is a document chatbot that meets business requirements. AnythingLLM has an input validation error vulnerability that stems from an incorrect input validation vulnerability that allows an attacker to escalate privileges by disabling Multi-User Mode...

WordPress Plugin App Builder 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. An input validation error vulnerability...

Apache Traffic Server Input Validation Error Vulnerability (CNVD-2024-20834)

Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. Apache Traffic Server suffers from an input validation error vulnerability that stems from continuation frame flooding in the HTTP/2 stack, which can be exploited by an attacke...

Apache CloudStack Input Validation Error Vulnerability (CNVD-2024-20836)

Apache CloudStack is a suite of Infrastructure as a Service IaaS cloud computing platforms from the Apache Foundation in the United States. The platform is primarily used to deploy and manage large networks of virtual machines. Apache CloudStack suffers from an input validation error vulnerabilit...

Apache HTTP Server Input Validation Error Vulnerability (CNVD-2024-36395)

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. An input validation error vulnerability exists in Apache HTTP Server version 2.4.58 and earlier versions, which can be exploited t...

Apache CloudStack 输入验证错误漏洞

Apache CloudStack is a suite of Infrastructure as a Service IaaS cloud computing platforms from the Apache Foundation in the United States. The platform is primarily used to deploy and manage large networks of virtual machines. Apache CloudStack suffers from an input validation error vulnerabilit...

IBM Db2 输入验证错误漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system executes on UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 suffers from an input validation error vulnerability that stems from susceptibility to denial of service attacks with...

ABB多款产品 输入验证错误漏洞

ABB Symphony Plus S+ Operations and others are products of ABB.ABB Symphony Plus S+ Operations is a decentralized control system.ABB Platform Engineering Tools is a platform tool.ABB Symphony Plus S+ Analyst is a software for analyzing and optimizing the performance of industrial control systems...

Apache Traffic Server 输入验证错误漏洞

Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. Apache Traffic Server suffers from an input validation error vulnerability that stems from continuation frame flooding in the HTTP/2 stack, which can be exploited by an attacke...

Tenda F1203 formSetCfm Method Buffer Overflow Vulnerability

The Tenda F1203 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in the Tenda F1203 version 2.0.1.6, which is caused by the funcpara1 parameter of the formSetCfm method of the /goform/setcfm file failing to correctly validate the length of the input data,...

WordPress Plugin Uncanny Toolkit for LearnDash 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

Rockwell Automation PowerFlex 527 Input Validation Error Vulnerability (CNVD-2024-34873)

The Rockwell Automation PowerFlex 527 is an adjustable AC frequency converter from Rockwell Automation. The Rockwell Automation PowerFlex 527 has an input validation error vulnerability that can be exploited by an attacker to cause a denial of service...

Eclipse ThreadX NetX Duo 输入验证错误漏洞

Eclipse ThreadX NetX Duo is an IPv4 and IPv6 dual network stack for Eclipse ThreadX open source. A security vulnerability exists in Eclipse ThreadX NetX Duo versions prior to 6.4.0, which stems from a vulnerability that allows attackers to cause a buffer overflow via the function...

Rockwell Automation PowerFlex 525 安全漏洞

The Rockwell Automation PowerFlex 527 is an adjustable AC frequency converter from Rockwell Automation. The Rockwell Automation PowerFlex 527 has an input validation error vulnerability that can be exploited by an attacker to cause a denial of service...

Rockwell Automation PowerFlex 安全漏洞

The Rockwell Automation PowerFlex 527 is an adjustable AC frequency converter from Rockwell Automation. The Rockwell Automation PowerFlex 527 has an input validation error vulnerability that can be exploited by an attacker to cause CIP communication to be interrupted, requiring a manual restart...

Mitsubishi Electric MELSEC-Q and MELSEC-L Input Validation Error Vulnerability

The Mitsubishi Electric MELSEC-Q Series is a MELSEC-Q series of programmable logic controllers from Mitsubishi Electric Japan. The Mitsubishi Electric MELSEC-Q and MELSEC-L have an input validation error vulnerability that originates from an integer overflow or wrap-around vulnerability in the CP...

Mitsubishi Electric MELSEC-Q and MELSEC-L Input Validation Error Vulnerability

The Mitsubishi Electric MELSEC-Q Series is a MELSEC-Q series of programmable logic controllers from Mitsubishi Electric Japan. The Mitsubishi Electric MELSEC-Q and MELSEC-L have an input validation error vulnerability that originates from an integer overflow or wrap-around vulnerability in the CP...

Mitsubishi Electric MELSEC-Q和MELSEC-L 输入验证错误漏洞

Mitsubishi Electric MELSEC-Q Series is a MELSEC-Q series programmable logic controller from Mitsubishi Electric, Japan.Mitsubishi MELSEC-L Series is a MELSEC-L series programmable logic controller from Mitsubishi, Japan. Mitsubishi MELSEC-L Series is a MELSEC-L series programmable logic controlle...

Intel Converged Security and Management Engine Input Validation Error Vulnerability

Intel Converged Security and Management Engine CSME is a security management engine from Intel Corporation USA. An input validation error vulnerability exists in Intel Converged Security and Management Engine versions prior to 2328.5.5.0, which stems from the presence of an input validation error...