CVE-2023-20722

In m4u, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07771518; Issue ID: ALPS07680084...

CVE-2022-25976

Improper input validation in the IntelR VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable denial of service via local access...

PT-2023-13478 · Intel · Intel Nuc 12 Compute Element +2

Name of the Vulnerable Software and Affected Versions: IntelR NUC 8 Compute Element affected versions not specified IntelR NUC 11 Compute Element affected versions not specified IntelR NUC 12 Compute Element affected versions not specified Description: The issue is related to improper input...

PT-2023-13193 · Intel · Intel Nuc Bios Firmware

Name of the Vulnerable Software and Affected Versions: IntelR BIOS firmware affected versions not specified Description: The issue is related to improper input validation in some IntelR BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2023-2699 · Microsoft · Windows Network File System +1

Name of the Vulnerable Software and Affected Versions: Windows Network File System affected versions not specified Description: The vulnerability exists due to insufficient input validation in the Windows Network File System. It allows remote attackers to execute arbitrary code and affect the...

PT-2023-22618 · Cltphp · Cltphp

Name of the Vulnerable Software and Affected Versions: CLTPHP versions prior to 6.1 Description: The issue is related to improper input validation. Recommendations: For versions prior to 6.1, update to version 6.1 or later to resolve the issue...

CVE-2023-30268

CLTPHP =6.0 is vulnerable to Improper Input Validation...

CVE-2023-31434

The parameters nutzertitel, nutzervn, and nutzernn in the user profile, and langID and ONLINEID in direct links, in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 do not validate input, which allows authenticated attackers to inject HTML Code and XSS payloads in multiple locations...

PT-2023-2673 · Oracle · Peoplesoft Enterprise Peopletools

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.58 through 8.60 Description: The issue exists due to insufficient input validation in the Elastic Search component of Oracle PeopleSoft Enterprise PeopleTools. This allows a remote attacker to gain...

The vulnerability of the command-line interface of Cisco IOS XE SD-WAN software allows a attacker to execute arbitrary commands.

The vulnerability of the command-line interface of Cisco IOS XE SD-WAN software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

CVE-2023-26069

Certain Lexmark devices through 2023-02-19 mishandle Input Validation issue 3 of 4...

CVE-2023-20680

In adsp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664785; Issue ID: ALPS07664785...

PT-2023-17214 · Phpmyfaq · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: phpMyFAQ versions prior to 3.1.12 Description: The issue is related to improper neutralization of input during web page generation, which can also be described as improper input validation. This affects the GitHub repository thorsten/phpmyfaq...

CVE-2023-24304

Improper input validation in the PDF.dll plugin of IrfanView v4.60 allows attackers to execute arbitrary code via opening a crafted PDF file...

CVE-2023-25881 ZDI-CAN-19390: Adobe Dimension OBJ File Improper Input Validation Remote Code Execution

Adobe Dimension versions 3.4.7 and earlier is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-20997

In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

CVE-2023-21017

In InstallStart of InstallStart.java, there is a possible way to change the installer package name due to an improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-21016

In AccountTypePreference of AccountTypePreference.java, there is a possible way to mislead the user about accounts installed on the device due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed fo...

CVE-2023-20998

In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

CVE-2023-25350

Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input data. The parameters passed from the front end to the back end are controllable, which will lead to SQL injection...