The vulnerability of the Coredns platform’s analytics and automation services for managing Cisco Nexus data centers allows a hacker to trigger a service failure.

The vulnerability of the coredns platform for analytics and automation of cloud-based Cisco Nexus Dashboard services exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending continuous DNS requests...

The vulnerability of the System Management Mode (SMM) implementation in AMD microprogramming software allows a attacker to influence the integrity of the protected information.

The vulnerability of the System Management Mode SMM implementation of AMD microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to influence the integrity of protected information...

CVE-2021-26644

SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board. A remote attacker can use this vulnerability to execute arbitrary code on the server where the bulletin board is running...

The vulnerability of the kernel of Juniper Networks Junos OS Evolved devices PTX10004, PTX10008, and PTX10016 allows a attacker to cause a service failure.

The vulnerability of the kernel of Juniper Networks Junos OS Evolved devices PTX10004, PTX10008, and PTX10016 exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Moodle course management system lies in the insufficient verification of data entered by users in the LTI provider’s library, allowing attackers to perform SSRF attacks.

The vulnerability of the Moodle course management system is related to insufficient verification of the data entered by users in the LTI provider’s library. Exploiting this vulnerability could allow a malicious actor to perform SSRF attacks remotely...

Actor can send an arbitrary token when adding liquidity

Lines of code Vulnerability details Impact Anyone can call addLiquidity directly and can input tokenId, params and data. The data inputs are never checked, so the user can send anything in there. Since the erc20 tokens routed are defined in the data parameter, user could send any token. Since the...

ROS-20221121-02

A vulnerability in the FreeRDP remote desktop protocol implementation is related to the fact that there is no range check for the input offset index in the ZGFX decoder. Exploitation of the vulnerability could allow an attacker acting remotely to read the associated data and attempt to decode it...

Pool funds can be used by anyone due to lack of allowance in the custom implementation of transferFrom

Lines of code Vulnerability details Impact Users' Pool assets can be used by anyone to execute a transaction, essentially stealing from them. Proof of Concept Pool contract uses a custom implementation of transferFrom which allows transfer of Pool assets from any address to any address as long as...

CVE-2022-39069

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...

Sql injection

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...

CVE-2022-39069

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...

CVE-2022-39069

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...

PT-2022-24710 · Zte · Zaip-Aie

Name of the Vulnerable Software and Affected Versions: ZTE ZAIP-AIE affected versions not specified Description: The issue is related to a SQL injection vulnerability. Due to the lack of input verification by the server, an attacker could trigger an attack by building malicious requests. This cou...

CVE-2022-39069

ZTE ZAIP-AIE is affected by CVE-2022-39069, a SQL injection vulnerability caused by insufficient input verification on the server. The issue can allow an attacker to construct malicious requests, potentially leaking content from the current table. The CVE has a medium severity (CVSS v3.1 base sco...

The vulnerability of the Cisco Discovery Protocol implementation in the microsoftware of Cisco Analog Telephone Adapter (ATA) series 190 devices allows a perpetrator to cause a service failure.

The vulnerability of the Cisco Discovery Protocol implementation in microprogrammable devices of the Cisco Analog Telephone Adapter ATA series 190 exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the virtual learning environment Moodle, related to the restoration of unreliable data in memory, allows a perpetrator to execute arbitrary code.

The vulnerability in the virtual training environment Moodle is related to the insecure input verification during the restoration of backup files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading the restored file...

The vulnerability of the IEC 61850 protocol processor in the Hitachi Energy MicroSCADA X SYS600 system control and management software allows a intruder to perform maintenance-related malfunctions.

The vulnerability of the IEC 61850 protocol processor in the Hitachi Energy MicroSCADA X SYS600 equipment management system exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to perform maintenance operations remotely...

The vulnerability of the ICCP component of the Hitachi Energy MicroSCADA X SYS600 software system allows a intruder to perform maintenance-related malfunctions.

The vulnerability of the ICCP component of the Hitachi Energy MicroSCADA X SYS600 system management software exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to perform maintenance operations remotely...

The vulnerability of the update mechanism implemented by the antivirus software Apex One allows a hacker to gain unauthorized access to protected information.

The vulnerability of the update mechanism of the antivirus software Apex One is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by downloading a specially created...

CVE-2022-37395

A Huawei device has an input verification vulnerability. Successful exploitation of this vulnerability may lead to DoS attacks.Affected product versions include:CV81-WDM FW versions 01.70.49.29.46...