581 matches found
The vulnerability of the CLI component of Fortinet’s FortiAP-S/W2 and FortiAP software solutions allows a hacker to overwrite system files.
The vulnerability of the CLI microprogramming software for Fortinet’s FortiAP-S/W2 and FortiAP devices exists due to insufficient verification of input data in the administration consoles. Exploiting this vulnerability allows a malicious actor to re-write system files using specially created...
PT-2022-3791 · Huawei · Huawei Printer Product
Name of the Vulnerable Software and Affected Versions: Huawei printer product affected versions not specified Description: The issue is related to an improper input verification vulnerability in the Huawei printer product. Successful exploitation of this vulnerability may cause service abnormalit...
PT-2022-3824 · Huawei · Huawei Cv81-Wdm
Name of the Vulnerable Software and Affected Versions: Huawei CV81-WDM FW affected versions not specified Description: The issue is caused by insufficient input verification, which may allow a remote attacker to cause a denial of service using a specially crafted packet. Successful exploitation o...
Security Advisory - Insufficient Input Verification Vulnerability In Huawei Product
There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerability may lead to service abnormal. Vulnerability ID: HWPSIRT-2022-76192 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2022-32144. For...
The vulnerability of the CPU FX5U(C) and FX5UJ modules of MELSEC iQ-F series PLCs, which stems from insufficient input data verification, allows attackers to trigger malfunctions during maintenance operations.
The vulnerability of the CPU FX5UC and FX5UJ modules of the MELSEC iQ-F series is related to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted files...
The vulnerability of the RDBMS Gateway/Generic ODBC Connectivity component of the Oracle Database Server allows a hacker to gain access to read data or to modify, add, or delete data.
The vulnerability of the RDBMS Gateway/Generic ODBC Connectivity component of the Oracle Database Server exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to gain read access to data, or to modify, add, or delete data using network packe...
GHSA-FV3M-XHQW-9M79 ballcat-codegen template engine remote code execution injection
Impact Ballcat Codegen provides the function of online editing code to generate templates. In version 1.0.0.beta.2, since Velocity and freemarker templates are introduced but input verification is not done, attackers can implement remote code execution through malicious code injection of the...
ballcat-codegen template engine remote code execution injection
Impact Ballcat Codegen provides the function of online editing code to generate templates. In version 1.0.0.beta.2, since Velocity and freemarker templates are introduced but input verification is not done, attackers can implement remote code execution through malicious code injection of the...
CVE-2022-24881
Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but...
Code injection
Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but...
CVE-2022-24881 Command Injection in Ballcat Codegen
Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but...
CVE-2022-24881 Command Injection in Ballcat Codegen
Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but...
CVE-2022-24881 Command Injection in Ballcat Codegen
Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but...
CVE-2021-26625
Insufficient Verification of input Data leading to arbitrary file download and execute was discovered in Nexacro platform. This vulnerability is caused by an automatic update function that does not verify input data except version information. Remote attackers can use this incomplete validation...
The vulnerability of the Web Access component of the Primavera Portfolio Management software allows a malicious individual to gain unauthorized access to read, modify, or delete data.
The vulnerability of the Web Access component of Primavera Portfolio Management, a software solution for automating production process management, is related to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...
Ubuntu: Security Advisory (USN-5360-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5360-1 tomcat9 vulnerabilities
It was discovered that Tomcat incorrectly performed input verification. A remote attacker could possibly use this issue to intercept sensitive information. CVE-2020-13943, CVE-2020-17527, CVE-2021-25122, CVE-2021-30640 It was discovered that Tomcat did not properly deserialize untrusted data. An...
USN-5360-1: Tomcat vulnerabilities
It was discovered that Tomcat incorrectly performed input verification. A remote attacker could possibly use this issue to intercept sensitive information. CVE-2020-13943, CVE-2020-17527, CVE-2021-25122, CVE-2021-30640 It was discovered that Tomcat did not properly deserialize untrusted data. An...
CVE-2021-26617 Gabia Firstmall remote code execution vulnerability
This issues due to insufficient verification of the various input values from user’s input. The vulnerability allows remote attackers to execute malicious code in Firstmall via navercheckoutadd function...