Lucene search
+L

639 matches found

CNVD
CNVD
added 2019/10/15 12:0 a.m.9 views

Belkin Wemo Switch 28B Input Validation Error Vulnerability

The Belkin Wemo Switch 28B is a smart outlet device from Belkin USA. A security vulnerability exists in the Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS version. A remote attacker can exploit this vulnerability to cause a denial of service by sending a StoreRules request with a specially...

7.8CVSS6.8AI score0.01617EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/29 12:0 a.m.5 views

FasterXML jackson-databind input validation error vulnerability (CNVD-2019-37149)

FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . jackson-databind is one of the components with data binding capabilities . An input validation error vulnerability exists in FasterXML jackson-databind versions prior to 2.9.10. The vulnerability stems from a network...

9.8CVSS6.7AI score0.04958EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/28 12:0 a.m.13 views

TP-Link Archer C3200 and Archer C2 Input Validation Error Vulnerability

The TP-Link Archer C3200 and Archer C2 are both a wireless router from China's P&L TP-Link. An input validation error vulnerability exists in the TP-Link Archer C3200 and Archer C2, which can be exploited by an attacker to transfer data between two isolated network segments on the same device...

8.8CVSS6.9AI score0.00913EPSS
Exploits1References1
CNVD
CNVD
added 2019/05/31 12:0 a.m.8 views

NVIDIA GeForce Experience Web Helper Component Input Validation Vulnerability

NVIDIA GeForce Experience is a set of automatic update tools for graphics cards from NVIDIA. Web Helper is a component of Web Helper that automatically updates graphics card drivers and supports graphics card performance management and optimization. A security vulnerability exists in the Web Help...

7.8CVSS6.7AI score0.00932EPSS
Exploits3References1
CNVD
CNVD
added 2019/04/15 12:0 a.m.5 views

Multiple D-Link Products Input Validation Error Vulnerability

D-Link DAP-1530 and so on are products of Taiwan, China AUO D-Link.D-Link DAP-1530 is a wireless signal extender.D-Link DAP-1610 is a wireless signal extender.D-Link DWR-111 is a wireless router.D-Link DAP-1610 is a wireless signal extender.D-Link DAP-1610 is a wireless signal extender.D-Link...

10CVSS7.5AI score0.74276EPSS
Exploits1References1
OSV
OSV
added 2019/04/02 11:3 a.m.10 views

OPENSUSE-SU-2019:1112-1 Security update for python-Flask

This update for python-Flask to version 0.12.4 fixes the following issues: Security issue fixed: - CVE-2018-1000656: Fixed an improper input validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. bsc1106279 This update was imported...

7.5CVSS7.5AI score0.03855EPSS
Exploits1References3
CNVD
CNVD
added 2019/03/25 12:0 a.m.6 views

Input Validation Vulnerability in Caret

Caret is a software package for plotting classification and regression models. An input validation vulnerability exists in versions of Caret prior to 2019-02-22 that originates from a networked system or product that does not properly validate incoming data. An attacker could exploit the...

9.8CVSS6.9AI score0.03614EPSS
Exploits0References1
CNVD
CNVD
added 2019/02/26 12:0 a.m.5 views

PHP Scripts Mall Custom T-Shirt Ecommerce Script Input Validation Vulnerability

PHP Scripts Mall Custom T-Shirt Ecommerce Script is a website system for customizing t-shirts online by PHP Scripts Mall India. An input validation vulnerability exists in PHP Scripts Mall Custom T-Shirt Ecommerce Script version 3.1.1, which can be exploited by an attacker to change the amount of...

6.5CVSS7.1AI score0.00944EPSS
Exploits1References1
CNVD
CNVD
added 2019/01/10 12:0 a.m.4 views

MacPaw CleanMyMac X Input Validation Vulnerability (CNVD-2019-23283)

MacPaw CleanMyMac X is a cleaning tool dedicated to the macOS platform. The product is capable of removing junk files, history cache, logs, etc. from your computer. An input validation vulnerability exists in the MacPaw CleanMyMac X version 4.04 helper service, which can be exploited by a local...

7.1CVSS6.6AI score0.00309EPSS
Exploits0References1
CNVD
CNVD
added 2019/01/10 12:0 a.m.5 views

MacPaw CleanMyMac X Input Validation Vulnerability (CNVD-2019-23276)

MacPaw CleanMyMac X is a cleaning tool dedicated to the macOS platform. The product is capable of removing junk files, history cache, logs, etc. from your computer. An input validation vulnerability exists in the MacPaw CleanMyMac X version 4.04 helper service, which can be exploited by a local...

7.1CVSS6.6AI score0.00309EPSS
Exploits0References1
CNVD
CNVD
added 2019/01/10 12:0 a.m.6 views

MacPaw CleanMyMac X Elevation of Privilege Vulnerability

MacPaw CleanMyMac X is a cleaning tool dedicated to the macOS platform from MacPaw USA. The product is capable of removing junk files, history cache, logs, etc. from your computer. An input validation vulnerability exists in MacPaw CleanMyMac X version 4.04. A local attacker can exploit the...

7.1CVSS6.6AI score0.00306EPSS
Exploits0References1
CNVD
CNVD
added 2018/12/21 12:0 a.m.4 views

Horner Automation Cscape Input Validation Vulnerability

Horner Automation Cscape is a set of programming software for industrial control system application development from Horner Automation. An input validation vulnerability exists in Horner Automation Cscape 9.80.75.3 SP3 and prior versions, which arises from a failure of the program to validate use...

7.8CVSS7.5AI score0.0167EPSS
Exploits0References1
Prion
Prion
added 2018/12/20 5:29 p.m.31 views

Input validation

Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service DoS. This attack appear to be exploitable via The victim deserializes malicious input, specifically very large values in the...

4.3CVSS7.8AI score0.04758EPSS
Exploits1References14Affected Software6
Tenable Nessus
Tenable Nessus
added 2018/12/04 12:0 a.m.44 views

RHEL 7 : ansible and openshift-ansible (RHSA-2017:0448)

An update for ansible and openshift-ansible is now available for Red Hat OpenShift Container Platform 3.2, Red Hat OpenShift Container Platform 3.3, and Red Hat OpenShift Container Platform 3.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

9.3CVSS7.8AI score0.1765EPSS
Exploits5References6
Prion
Prion
added 2018/10/05 2:29 p.m.16 views

Input validation

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

6.1CVSS7.3AI score0.00856EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2018/10/05 12:0 a.m.6 views

The vulnerability of the Apache HTTP Server web server, related to insufficient validation of input data, allows attackers to cause service failures.

The vulnerability of the Apache HTTP Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions by exhausting the number of simultaneous connections through continuous sending of Maximum Size SETTINGS type fram...

5.3CVSS6.9AI score0.51002EPSS
Exploits0References19Affected Software8
CNVD
CNVD
added 2018/09/13 12:0 a.m.5 views

Siemens SCALANCE X Switches Input Validation Vulnerability

Siemens SCALANCE X Switches is an industrial Ethernet switch from Siemens, Germany. An input validation vulnerability exists in Siemens SCALANCE X Switches, which could be exploited by an attacker with network access privileges to cause a denial of service...

8.6CVSS8.4AI score0.0418EPSS
Exploits0References1
CNVD
CNVD
added 2018/09/10 12:0 a.m.6 views

MalwareFox AntiMalware v2.74.206.150 suffers from a denial of service vulnerability

MalwareFox AntiMalware is a suite of malware removal tools. The tool automatically detects and removes malware, cleans browsers, repairs files corrupted by rootkits and protects against virus infections in real time. A denial of service vulnerability exists in the zam32.sys driver in MalwareFox...

6.5AI score
Exploits0
CNVD
CNVD
added 2018/09/05 12:0 a.m.6 views

Philips e-Alert Input Validation Vulnerability

Philips e-Alert is an electronic alert solution for MRI systems from Philips in the Netherlands, which is used to monitor and alert on MRI system performance. An input validation vulnerability exists in Philips e-Alert R2.1 and prior versions. An attacker could use this vulnerability to arbitrari...

9.8CVSS9.7AI score0.03834EPSS
Exploits0References1
OSV
OSV
added 2018/06/22 1:29 p.m.6 views

CVE-2017-7466

Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the ability to send facts back to the Ansible server, could use this flaw to execute arbitrary code on the...

8CVSS8.9AI score0.03157EPSS
Exploits0References8
Rows per page
Query Builder