CVE-2022-48510

Summary: CVE-2022-48510 concerns the AMS module in Huawei’s HarmonyOS/EMUI. The root cause is improper input verification in the AMS module, leading to unauthorized operations and, per sources, potential authentication bypass. The vulnerability is described across multiple feeds (NVD/Red Hat/CNVD...

CVE-2023-37241

Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart...

CVE-2023-37241

Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart...

CVE-2023-37241

CVE-2023-37241 is an input verification vulnerability in the WMS API. Exploitation could cause the affected device to restart. The available connected sources confirm the issue and its impact but do not provide concrete exploit details, affected versions, or a validated fix/update. No remediation...

CVE-2022-48510: Exposure of Sensitive Information to an Unauthorized Actor

Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations...

PT-2023-25850 · Wms Api · Wms Api

Name of the Vulnerable Software and Affected Versions: WMS API affected versions not specified Description: The issue is related to an input verification vulnerability in the WMS API. Successful exploitation of this issue may cause the device to restart. Recommendations: At the moment, there is n...

PT-2023-24703 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns incomplete input parameter verification in the communication framework module. Successful exploitation may affect availability. There...

PT-2023-15836 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an input verification vulnerability in the AMS module. Successful exploitation of this vulnerability can cause unauthorized...

Power Monitoring Expert Unauthorized Access

The vulnerability of the Power Monitoring Exper software-related system is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Custom Reports Component Code Execution

The vulnerability of the Custom Reports component of the SCADA system’s data server and the Custom Reports and IGSS Dashboard monitoring tools exists due to insufficient verification of input data. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code using a specially...

Coredns Analytics DoS

The vulnerability of the coredns platform for analytics and automation of cloud-based Cisco Nexus Dashboard services exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending continuous DNS requests...

System Management Mode SMM Data Compromise

The vulnerability of the System Management Mode SMM implementation of AMD microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to influence the integrity of protected information...

CVE-2021-26644

SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board. A remote attacker can use this vulnerability to execute arbitrary code on the server where the bulletin board is running...

Juniper Networks Junos OS Evolved Kernel DoS

The vulnerability of the kernel of Juniper Networks Junos OS Evolved devices PTX10004, PTX10008, and PTX10016 exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Moodle LTI Provider SSRF

The vulnerability of the Moodle course management system is related to insufficient verification of the data entered by users in the LTI provider’s library. Exploiting this vulnerability could allow a malicious actor to perform SSRF attacks remotely...

Actor can send an arbitrary token when adding liquidity

Lines of code Vulnerability details Impact Anyone can call addLiquidity directly and can input tokenId, params and data. The data inputs are never checked, so the user can send anything in there. Since the erc20 tokens routed are defined in the data parameter, user could send any token. Since the...

ROS-20221121-02

A vulnerability in the FreeRDP remote desktop protocol implementation is related to the fact that there is no range check for the input offset index in the ZGFX decoder. Exploitation of the vulnerability could allow an attacker acting remotely to read the associated data and attempt to decode it...

Pool funds can be used by anyone due to lack of allowance in the custom implementation of transferFrom

Lines of code Vulnerability details Impact Users' Pool assets can be used by anyone to execute a transaction, essentially stealing from them. Proof of Concept Pool contract uses a custom implementation of transferFrom which allows transfer of Pool assets from any address to any address as long as...

CVE-2022-39069

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...

Sql injection

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...