CVE-2024-27380

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisetdelayedwakeuptype, there is no input validation check on a length of ioctlargs-argsi coming from userspace, which can lead to a heap over-read...

CVE-2024-27380

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsisetdelayedwakeuptype, there is no input validation check on a length of ioctlargs-argsi coming from userspace, which can lead to a heap over-read...

CVE-2024-27379

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsinansubscribegetnlparams, there is no input validation check on halreq-numintfaddrpresent coming from userspace, which can lead to a heap overwrite...

RHEL 8 : libexif (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libexif: Input validation issue resulting in a denial of service CVE-2018-20030 Note that Nessus has not tested for...

PT-2024-7374 · Unknown · Inflex Web

Name of the Vulnerable Software and Affected Versions: Inflex Web affected versions not specified Description: The issue is related to insecure handling of user input in the Inflex Web platform, which can be exploited by a remote attacker to execute arbitrary SQL code. Recommendations: At the...

PT-2024-24191 · Infotel Conseil · Glpi

Name of the Vulnerable Software and Affected Versions: Infotel Conseil GLPI versions 10.X.X and after Description: The issue allows a remote attacker to execute arbitrary code via the insufficient validation of user-supplied input. Recommendations: For Infotel Conseil GLPI versions 10.X.X and...

Tenda 4G300 sub_4260F0 function buffer overflow vulnerability

Tenda 4G300 is a wireless router from Tenda China. A buffer overflow vulnerability exists in the Tenda 4G300 version 1.01.42, which originates from the parameter upfilen of the sub4260F0 function failing to correctly validate the length of the input data, and can be exploited by a remote attacker...

PT-2024-6394 · Artifex +6 · Artifex Ghostscript +6

Name of the Vulnerable Software and Affected Versions: Artifex Ghostscript versions prior to 10.03.1 Description: The issue is related to the incorrect input validation in the psi/zmisc1.c file of the Artifex Ghostscript software. This can allow a remote attacker to execute arbitrary code. The...

The vulnerability of the Offer LOV component of the Oracle Trade Management software, a business automation system within the Oracle E-Business Suite, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the “Offer LOV” component of the Oracle Trade Management software for managing trading operations within the Oracle E-Business Suite is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain...

Tenda AC10 Buffer Overflow Vulnerability

Tenda A18 is a dual-band Gigabit wireless router launched for 200M and above fiber users. A buffer overflow vulnerability exists in Tenda AC10, which stems from the adslPwd parameter of the formWanParameterSetting method failing to correctly validate the length size of the input data, no detailed...

PT-2024-4897 · Oracle · Oracle Trade Management +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite component: Finance LOV versions 12.2.3 through 12.2.13 Description: A vulnerability in the Oracle Trade Management product allows an unauthenticated attacker with network access via HTTP to compromise Oracle Trade...

PT-2024-3740 · Oracle · Oracle E-Business Suite +1

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue exists due to insufficient input validation in the LOV component of the Oracle Complex Maintenance, Repair, and Overhaul product, part of...

PT-2024-3742 · Oracle · Oracle Complex Maintenance

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the LOV component of Oracle Complex Maintenance, Repair, and Overhaul, allowing an...

PT-2024-3531 · Oracle · Peoplesoft Enterprise Hcm Benefits Administration

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise HCM Benefits Administration version 9.2 Description: The issue is related to insufficient input validation in the Benefits Administration component. It allows a low-privileged attacker with logon access to the...

WordPress Plugin Premium Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

ECShop SQL Injection Vulnerability (CNVD-2024-26111)

ShopeX ECShop is an open source mall system of the Chinese business school ShopeX company . Support PC + H5 + APP + small program mall, source code free download experience, suitable for enterprise development and build mall. ECShop SQL injection vulnerability , the vulnerability stems from...

PT-2024-3114 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This allows a remote attacker to execute arbitrary code...

PT-2024-3113 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This allows a remote attacker to execute arbitrary code...

PT-2024-14534 · Unisoc (Shanghai) Technologies Co. +1 · T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a possible improper input validation in the SecurityCommand message after security has been activated. This could lead to remote...

Google Android Information Disclosure Vulnerability (CNVD-2024-24426)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that stems from improper input validation in the smpprocsecreq method of the smpact.cc file, which may result in an out-of-bounds read. An attacker can...