MSHTML Code Execution

The vulnerability of the MSHTML platform in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted email...

PT-2023-7878 · Unknown · Itpison Omicard Edm

Name of the Vulnerable Software and Affected Versions: ITPison OMICARD EDM affected versions not specified Description: The SMS-related function in ITPison OMICARD EDM has insufficient validation for user input, allowing an unauthenticated remote attacker to inject arbitrary SQL commands. This ca...

Static Routing Configuration Handler Arbitrary Command Execution

The vulnerability of the Static Routing Configuration Handler component in Ubiquiti EdgeRouter software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

CMPappBP Component DoS

The vulnerability of the CMPappBP component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Microsoft .NET Framework Privilege Escalation

The vulnerability of the Microsoft .NET Framework software platform is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

httpd DoS

The vulnerability of the httpd component of the microprogramming-based Wi-Fi router software from ASUS, the RT-AX88U, exists due to insufficient testing of input data. Exploiting this vulnerability could allow a remote attacker to execute a “denial-of-service” attack...

Pragmatic General Multicast Windows Code Execution

The vulnerability of the Pragmatic General Multicast protocol implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

CVE-2023-20119

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, formerly known as Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the...

Evaluating SQL Injection Vulnerabilities in Management Systems

Judging Management System is a judging management system. Judging Management System has a SQL injection vulnerability in version v.1.0. The vulnerability is related to the critid parameter of the editcriteria.php file, and is due to the program not performing strict filter validation of user inpu...

Microsoft Office Code Execution

The vulnerability of Microsoft Office packages is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Oracle Application Object Library GUI Component DoS Data Access

The vulnerability of the GUI component of the Oracle Application Object Library in the Oracle E-Business Suite system for enterprise automation activities is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or gain...

Oracle BI Publisher Web Server Disclosure

The vulnerability of the Web Server component of the Oracle BI Publisher software exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information through HTTP requests...

Delta Electronics InfraSuite Device Master Input Validation

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Cisco Small Business cross-site scripting vulnerabilities

Cisco Small Business is a switch from Cisco USA. A security vulnerability exists in the Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325, which stems from insufficient validation of inputs to the web-based management interface...

AMD Secure Encrypted Virtualization SEV Unauthorized Access

The vulnerability of AMD Secure Encrypted Virtualization SEV microprogramming software for processors is related to insufficient validation of input data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

QTS Network Storage OS Code Execution

The vulnerability of QTS network storage operating systems from QNAP is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Efence SQL injection vulnerability

Thinking Software Technology Efence is a mobile device management solution from China-based Thinking Software Technology. A SQL injection vulnerability exists in Efence 1.2.58 DB.ver 28, which stems from insufficient validation of user input in the login function. An attacker could use this...

MySQL Server InnoDB DoS

The vulnerability of the InnoDB component in the MySQL Database Management System is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

D-Link COVR Router SetTriggerWPS Command Execution

The vulnerability of the SetTriggerWPS function in D-Link COVR 1200, 1202, and 1203 router microprogramming systems is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands through the...