Multiple Codesys Products Input Validation Error Vulnerability

3s-smart Software Solutions CODESYS is a controller development system from 3s-smart Software Solutions, Germany. An input validation error vulnerability exists in multiple Codesys products. The vulnerability stems from the fact that after successful authentication of a user's identity, a specifi...

EPSON printer security breach

The Epson EPSON printer is a printer from the Japanese company Epson. A security vulnerability exists in the EPSON printer that originates from an improper input validation vulnerability in Web Config...

Google Chrome 命令注入漏洞

Google Chrome is a web browser from Google, an American company. An input validation error vulnerability previously existed in Google Chrome on ChromeOS version 115.0.5790.98, which stemmed from an insufficient validation of untrusted input in Chromad. An attacker could exploit the vulnerability ...

Vound Intella Connect 输入验证错误漏洞

Vound Intella Connect is a browser-based web review platform from Vound. A security vulnerability exists in Vound Intella Connect version 2.6.0.3 that stems from the presence of an open redirection vulnerability...

TDengine 输入验证错误漏洞

TDengine is an open source, high performance, cloud-native time series database from TDengine. An input validation error vulnerability exists in versions prior to TDengine 3.0.7.1, which stems from the database crashing on a UDF nested query resulting in a denial of service, allowing an attacker ...

Object Computing OpenDDS 输入验证错误漏洞

Object Computing OpenDDS is an open source middleware framework for C++ and Java applications from Object Computing. An input validation error vulnerability exists in OpenDDS versions prior to 3.25, which arises from an error in parsing DATA sub-messages, and allows an attacker to remotely...

IBM Security Guardium 输入验证错误漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An input validation error vulnerability exists in IBM...

IBM Security Verify Access 输入验证错误漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...

Google Pixel Input Validation Error Vulnerability (CNVD-2023-65159)

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from an input validation error vulnerability that stems from a failure to properly validate user input in GeoLocation.java, which can be exploited by an attacker to elevate local privileges...

PCRE2 输入验证错误漏洞

PCRE2 is PCRE2Project open source set of C functions. Use the same syntax and semantics as Perl5 to achieve regular expression pattern matching . A security vulnerability exists in PCRE2 versions prior to 10.41, which stems from an integer overflow problem in pcre2test that allows an attacker to...

Cisco SD-WAN vManage Input Validation Error Vulnerability (CNVD-2023-62933)

Cisco SD-WAN vManage is a highly customizable dashboard from Cisco, Inc. that simplifies and automates the deployment, configuration, management, and operation of Cisco SD-WAN. Cisco SD-WAN vManage suffers from an input validation error vulnerability that stems from insufficient request validatio...

LivelyWorks Articart 输入验证错误漏洞

LivelyWorks Articart is an application from LivelyWorks, Inc. An input validation error vulnerability exists in LivelyWorks Articart version 2.0.1, which stems from the presence of an unknown function in the file /change-language/deDE in the component Base64 Encoding Handler, which causes a...

Apache Airflow 输入验证错误漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is characterized by scalability and dynamic monitoring. Apache Airflow An input validation error vulnerability exists in Apache Hive Provider...

ELECOM WRH 输入验证错误漏洞

ELECOM WRH is a webcam for the home from ELECOM Japan. An input validation error vulnerability exists in ELECOM WRH-300WH-H v2.12 and earlier versions, which stems from the presence of an open redirection, where a user of a website using the affected product may be redirected to an arbitrary...

Siemens RUGGEDCOM ROX 输入验证错误漏洞

RUGGEDCOM products offer a degree of robustness and reliability that sets the standard for communication networks deployed in harsh environments. An input validation error vulnerability exists in the Siemens RUGGEDCOM ROX, which can be exploited by an attacker to send an incorrectly formatted HTT...

IBM DB2 输入验证错误漏洞

IBM DB2 Denial of Service Vulnerability CNVD-2023-64879...

Easy!Appointments 输入验证错误漏洞

Easy!Appointments is a web-based appointment and schedule management system. An input validation error vulnerability exists in versions of Easy!Appointments prior to 1.5.0, which originates from a redirect that opens up...

Mozilla Firefox Input Validation Error Vulnerability (CNVD-2023-59028)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an input validation error vulnerability that stems from insufficient validation of the drag-and-drop API in combination with social engineering, which can be exploited by a...

Gitea Input Validation Error Vulnerability (CNVD-2023-60472)

Gitea is a lightweight Go-based git service developed by the Gitea community. An input validation error vulnerability exists in Gitea versions prior to 1.19.4, which stems from improper input validation of the program. An attacker can exploit this vulnerability to obtain sensitive information...

SAMSUNG Mobile devices 输入验证错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR Jul-2023 Release 1 version, which stems from an incorrect input validation vulnerability in the DataProfile...