4511 matches found
Schneider Electric Modicon Controllers 输入验证错误漏洞
Schneider Electric Modicon Controllers is a Modicon family of programmable logic controllers from Schneider Electric France. An input validation error vulnerability exists in Schneider Electric Modicon Controllers that stems from incorrect input validation. When unauthenticated specially crafted...
GStreamer 输入验证错误漏洞
GStreamer is a GStreamer open source set of frameworks for processing streaming media. An input validation error vulnerability exists in GStreamer, which stems from an integer overflow during addition when samplescount is large enough...
Microsoft Windows Mobile Broadband Driver 输入验证错误漏洞
Microsoft Windows Mobile Broadband Driver is a driver from Microsoft Corporation USA that allows the Windows operating system to communicate with mobile broadband devices. An input validation error vulnerability exists in Microsoft Windows Mobile Broadband Driver. An attacker could exploit the...
Adobe Experience Manager 输入验证错误漏洞
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An inp...
Siemens SIMATIC WinCC和Siemens SIMATIC STEP 输入验证错误漏洞
Totally Integrated Automation Portal TIA Portal is PC software that offers the complete range of Siemens digital automation services, from digital planning and integrated engineering to transparent operation. A local arbitrary code execution vulnerability exists in Siemens Engineering Platforms,...
PwnDoc 输入验证错误漏洞
PwnDoc is a penetration test report generator from the PwnDoc open source. An input validation error vulnerability exists in PwnDoc 0.5.3 and earlier versions, which stems from the fact that an authenticated user can crash the backend by raising an UnhandledPromiseRejection on an audit on the exi...
Adobe Experience Manager 输入验证错误漏洞
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An inp...
Adobe Animate 输入验证错误漏洞
Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from an integer overflow or wrap-around vulnerability that can be exploited by an attacker to execute arbitrary code in the current user's environment...
Microsoft Defender 输入验证错误漏洞
Microsoft Defender is a threat protection software from Microsoft USA. A security vulnerability exists in Microsoft Defender. The vulnerability is exploited by attackers to perform spoofing attacks...
Microsoft Windows Mobile Broadband Driver 输入验证错误漏洞
Microsoft Windows Mobile Broadband Driver is a driver from Microsoft Corporation USA that allows the Windows operating system to communicate with mobile broadband devices. An input validation error vulnerability exists in Microsoft Windows Mobile Broadband Driver. An attacker could exploit the...
Dell OpenManage Server Administrator 输入验证错误漏洞
Dell OpenManage Server Administrator Dell OMSA is a software agent from Dell Dell USA. Provides a comprehensive one-to-one systems management solution in two ways. An input validation error vulnerability exists in Dell OpenManage Server Administrator version 11.0.1.0 and prior versions, which...
Denial Of Service (DoS)
System.Formats.Nrbf is vulnerable to Denial of Service DoS. The vulnerability is due to incorrect input validation in the NrbfDecoder component, which could allow an attacker to disrupt application availability...
Traefik 输入验证错误漏洞
Traefik is an open source reverse proxy and load balancing tool from Traefik Open Source. An input validation error vulnerability exists in Traefik that stems from allowing a client to supply an X-Forwarded-Prefix header from an untrusted source...
BunkerWeb 输入验证错误漏洞
BunkerWeb is an open source web application firewall from Bunkerity Open Source. An input validation error vulnerability exists in BunkerWeb version 1.5.11 and earlier, which stems from the presence of an open redirection vulnerability that allows an attacker to redirect an authenticated user to ...
Qualcomm Chipsets 输入验证错误漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from improper input validation resulting in a buffer overwrite...
LogSign Unified SecOps Platform 输入验证错误漏洞
Logsign Unified SecOps Platform is a security operations platform from Logsign, Inc. for collecting, storing, analyzing, and responding to security data from a variety of sources. An input validation error vulnerability exists in LogSign Unified SecOps Platform versions prior to 6.4.26, which ste...
Apache Traffic Server Input Validation Error Vulnerability (CNVD-2024-46272)
Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. Apache Traffic Server is vulnerable to an input validation error vulnerability that stems from the inclusion of an input validation error. No detailed vulnerability details are...
SFTPGo 输入验证错误漏洞
SFTPGo is a full-featured and highly configurable SFTP server from the individual developer Nicola Murino in Italy. An input validation error vulnerability exists in SFTPGo versions prior to 2.4.0 through 2.6.3, which stems from the ability of an administrator to access the underlying operating...
PT-2024-10709 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version affected versions not specified Description: The issue is related to a possible serialization/deserialization mismatch in the writeToParcel method of MediaPlayer.java due to improper input validatio...
pyLoad 输入验证错误漏洞
pyLoad is a free and open source download manager written in Python by pyLoad Open Source. An input validation error vulnerability exists in pyload version 0.5.0 due to improper handling of the "next" parameter in the login function. An attacker could use this vulnerability to redirect users to a...