Lucene search
K

145 matches found

CNNVD
CNNVD
added 2023/11/01 12:0 a.m.2 views

Project Worlds Online Examination System Input Validation Error Vulnerability

Project Worlds Online Examination System is an online examination system. Project Worlds Online Examination System v1.0 suffers from an input validation error vulnerability that stems from susceptibility to multiple open redirection vulnerabilities that allow an attacker to redirect a victim user...

6.1CVSS7.2AI score0.00155EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/06/28 12:0 a.m.1 views

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from incorrect input validation, which could result in out-of-bounds reads, which could lead to local information leaks...

4.4CVSS5.1AI score0.00023EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 6:10 a.m.1 views

SUSE CVE-2007-6242

Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary code via unknown vectors, related to "input validation errors."...

6.8CVSS7.9AI score0.4577EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:6 a.m.1 views

SUSE CVE-2008-4824

Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to "input validation errors."...

9.3CVSS8.1AI score0.49036EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/01/18 12:0 a.m.2 views

Sewio Real-Time Location System (RTLS) Studio 输入验证错误漏洞

Sewio Real-Time Location System RTLS Studio is a real-time location system from Sewio, Inc. An input validation error vulnerability exists in Sewio Real-Time Location System RTLS Studio versions 2.0.0 through 2.6.2, which stems from susceptibility to incorrect input validation of user input to...

6.8CVSS6.6AI score0.00232EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/12/16 12:0 a.m.1 views

Rockwell Automation controllers 输入验证错误漏洞

Rockwell Automation controllers are a series of controllers from Rockwell Automation. A denial of service vulnerability exists in Rockwell Automation controllers, which stems from its controllers mishandling of incorrectly formatted CIP requests, and can be exploited by an attacker to cause a maj...

8.6CVSS6.7AI score0.01501EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/08/01 12:0 a.m.2 views

IBM DataPower Gateway 代码问题漏洞

IBM DataPower Gateway is a set of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interface API, web, service-oriented architecture SOA, B2B and cloud workloads. The platform protects, integrates and optimizes access across channels...

8.8CVSS5.6AI score0.00135EPSS
Exploits0References3
CNVD
CNVD
added 2022/05/23 12:0 a.m.18 views

Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-44177)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. An input validation error vulnerability exists in Google TensorFlow versions prior to 2.9.0, prior to 2.8.1, prior to 2.7.2, and prior to 2.6.4, which stems from the fact that...

5.5CVSS6.8AI score0.0005EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2022/05/19 12:0 a.m.39 views

Apple Mac OS X Security Update (HT213255)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.2AI score0.86227EPSS
Exploits12References3
OpenVAS
OpenVAS
added 2022/05/12 12:0 a.m.26 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (May 2022)

This host is missing a critical security update according to Microsoft Office Click-to-Run updates SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.8CVSS5.6AI score0.07731EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.3 views

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A remote code execution vulnerability exists in Microsoft Windows Upgrade Assistant. The vulnerability stems from improper handling of input data and can be exploited by an attacker to...

7.8CVSS8.9AI score0.01569EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.1 views

Microsoft Kerberos for Windows 输入验证错误漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A remote code execution vulnerability exists in Microsoft Windows Kerberos. The vulnerability stems from failure to properly process input data and can be exploited by an attacker to...

8.1CVSS9.2AI score0.04076EPSS
Exploits0References8
CNNVD
CNNVD
added 2022/02/09 12:0 a.m.2 views

Xwiki Platform 输入验证错误漏洞

Xwiki Platform is a Wiki platform for creating Web collaboration applications from the French company Xwiki. XWiki Platform is vulnerable to input validation errors, which can be exploited by attackers to redirect users to malicious sites for phishing and other attacks...

6.1CVSS5.6AI score0.00281EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/01/18 12:0 a.m.2 views

Oracle Java SE和Oracle GraalVM 输入验证错误漏洞

Oracle Java SE is an Oracle Corporation USA product for developing and deploying Java applications on desktops, servers, and embedded devices and in real-time environments.Oracle Java SE is vulnerable to an input validation error that could be exploited by an attacker to potentially cause an...

5.3CVSS5.6AI score0.00143EPSS
Exploits0References53
OpenVAS
OpenVAS
added 2022/01/13 12:0 a.m.22 views

Adobe Reader 2017 Security Update (APSB22-01) - Mac OS X

Adobe Acrobat Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

9.3CVSS6.9AI score0.18041EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/10/29 12:0 a.m.1 views

GitLab 输入验证错误漏洞

GitLab is a self-hosted, Git version control system project repository application developed in Ruby on Rails by GitLab, Inc. GitLab CE/EE is vulnerable to input validation errors, which can be exploited to cause high CPU usage...

5.3CVSS5.5AI score0.00248EPSS
Exploits0References6
OSV
OSV
added 2021/09/01 11:15 a.m.0 views

CVE-2020-9000

An issue was discovered in iPortalis iCS 7.1.13.0. Attackers can send a sequence of requests to rapidly cause .NET Input Validation errors. This increases the size of the log file on the remote server until memory is exhausted, therefore consuming the maximum amount of resources triggering a deni...

7.5CVSS7.2AI score
Exploits0References2
OpenVAS
OpenVAS
added 2021/08/11 12:0 a.m.17 views

Microsoft Windows Defender Multiple RCE Vulnerabilities (Jul 2021)

This host is missing a critical security update according to Microsoft Security Updates released for Microsoft Windows Defender Protection Engine dated 13-07-2021. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

9.3CVSS7.6AI score0.04116EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.2 views

Foxit PhantomPDF 缓冲区错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A memory corruption vulnerability exists in Foxit PhantomPDF when processing U3D objects in PDF files. The vulnerability stems from the program not properly validating user input. An attacker could exploit this vulnerability t...

7.8CVSS6AI score0.02912EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2021/02/03 12:0 a.m.33 views

Apple Mac OS X Security Updates (HT212147)-02

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.0172EPSS
Exploits0References3
Rows per page
Query Builder