PT-2022-4981 · Microsoft · Office Visio +2

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visio, which can be exploited by opening a specially crafted file, allowing an attacker to execute arbitrar...

PT-2022-4427

Name of the Vulnerable Software and Affected Versions Cisco FXOS Software affected versions not specified Cisco NX-OS Software affected versions not specified Description A vulnerability in the Cisco Discovery Protocol feature could allow an unauthenticated, adjacent attacker to execute arbitrary...

PT-2022-15978 · Intel · Intel Data Center Manager Sdk

Name of the Vulnerable Software and Affected Versions: IntelR Data Center Manager versions prior to 4.1 Description: The issue is related to improper input validation, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations: For versions pri...

PT-2022-21745 · Intel · Intel Nuc Laptop Kits

Name of the Vulnerable Software and Affected Versions: IntelR NUC Laptop Kits versions prior to BC0076 Description: The issue is related to improper input validation in the firmware, which may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations:...

PT-2022-23048 · Loopback +1 · Loopback +1

Name of the Vulnerable Software and Affected Versions: LoopBack versions prior to 5.5.1 Description: Improper input validation on the contains LoopBack filter may allow for arbitrary SQL injection. When the extended filter property contains is permitted to be interpreted by the Postgres connector...

PT-2022-4172 · Microsoft · Windows Webbrowser Control +1

Name of the Vulnerable Software and Affected Versions: Windows WebBrowser Control affected versions not specified Description: The issue exists due to insufficient input validation in the Windows WebBrowser Control component of the Windows operating system. This allows a remote attacker to execut...

PT-2022-14581 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: The issue is related to improper input validation in the PacProxyService.java, which could lead to a system service crash and result in a local denial of service. This requires User...

PT-2022-14579 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: The issue is related to a possible inappropriate file read due to improper input validation in the onSaveRingtone method of DefaultRingtonePreference.java. This could lead to local...

PT-2022-3731 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.38 and prior MySQL Server versions 8.0.29 and prior Description: The issue is related to insufficient input validation in the Server: Options component of the MySQL Server product. It allows a high-privileged attacke...

74cms 跨站脚本漏洞

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Company. 74cms version v3.5.1 contains a cross-site scripting vulnerability, which originates from the path /index/jobfairol/show/ lack of data validation filtering for user-supplied data and output. An attacker...

MGASA-2022-0236 Updated exempi packages fix security vulnerability

XMP Toolkit SDK versions 2020.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

Elitecms SQL Injection Vulnerability (CNVD-2022-57760)

Elitecms is a Web content management from elitecms India. elitecms version 1.01 has a SQL injection vulnerability that originates from the /admin/addsidebar.php page's lack of validation of external input SQL statements, which can be exploited by attackers to execute illegal SQL commands to steal...

Ubuntu 16.04 ESM : CUPS vulnerabilities (USN-5454-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5454-2 advisory. USN-5454-1 fixed several vulnerabilities in CUPS. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding...

PUB-A-215212561

In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file:// scheme due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2022-19456

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.9.0 TensorFlow versions prior to 2.8.1 TensorFlow versions prior to 2.7.2 TensorFlow versions prior to 2.6.4 Description The implementation of tf.raw ops.UnsortedSegmentJoin does not fully validate the input...

CVE-2021-0126

Improper input validation for the IntelR Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

PT-2022-14324 · Vow · Vow

Name of the Vulnerable Software and Affected Versions: vow affected versions not specified Description: The issue is related to a possible read of uninitialized data due to improper input validation. This could lead to local information disclosure, with System execution privileges required. No us...

Exploit for Improper Input Validation in Google Android

DirtyPipe for Android Dirty Pipe CVE-2022-0847 temporary roo...

The vulnerability of the wget_test.asp implementation of the D-Link DI-7200G V2.E1 router microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the wgettest.asp implementation of the D-Link DI-7200G V2.E1 router microprogramming system is related to insufficient cleaning of input data during the processing of the url parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2022-1535 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.3-p1 and earlier Adobe Commerce versions 2.3.7-p2 and earlier Magento Open Source versions 2.4.3-p1 and earlier Magento Open Source versions 2.3.7-p2 and earlier Description: This vulnerability involves an improper...