581 matches found
The vulnerability of the virtual learning environment Moodle, which stems from insufficient verification of input data, allows a intruder to gain unauthorized access to protected information.
The vulnerability in the virtual learning environment Moodle exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
CVE-2021-22331
There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product...
The vulnerability of the self-service portal systems for call processing in Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition allows a intruder to compromise data integrity.
The vulnerability of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition call management systems exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity...
The vulnerability in the web administration panel of Microprogrammed software for Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 allows a hacker to add IP addresses to a white list.
The vulnerability of the web-based administration panel of Microprogramming software for Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 lies in insufficient verification of input parameters. Exploiting this vulnerability allows an attacker to add IP addresses to a white list using the...
The vulnerability of the Omnibox address bar in Google Chrome allows a hacker to compromise data integrity.
The vulnerability of the Omnibox address bar in Google Chrome relates to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to compromise the integrity of the data...
The vulnerability in the implementation of the WebRTC technology in Google Chrome browser allows a hacker to gain access to confidential data.
The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...
CVE-2021-21726
Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:...
CVE-2021-21726
Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:...
Input validation
Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:...
CVE-2021-21726
CVE-2021-21726 affects ZTE ZXONE series (ZXONE 9700, ZXONE 8700, ZXONE 19700) with specific firmware/version identifiers (e.g., V1.40.021.021CP049, V1.0P02B219_@NCPM-RELEASE_2.40R1-20200914.set). The vulnerability is an input verification flaw in the diagnostic function interface caused by insuff...
CVE-2021-21726
Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:...
Buffer overflow
There is a buffer overflow vulnerability in Mate 30 10.1.0.126C00E125R5P3. A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause buffer overflow, compromising normal service...
Design/Logic Flaw
There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. A module does not verify the some input. Attackers can exploit this vulnerability by sending malicious input through specific app. This could cause out-of-bound, compromising normal service...
The vulnerability of the Push API interface on Mozilla Firefox’s browser allows a perpetrator to gain unauthorized access to protected information or cause a service failure.
The vulnerability of the Push API interface of Mozilla Firefox’s browser is related to a lack of mechanisms for verifying input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures...
The vulnerability of the Fanuc 32i numerical program-controlled controller lies in the insufficient verification of input data, allowing a intruder to trigger a service failure.
The vulnerability of the Fanuc 32i numerical program-controlled controller is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure using specially crafted network packets...
The vulnerability of the command-line interface of the StarOS operating system, which allows a hacker to gain increased privileges
The vulnerability of the StarOS command-line interface is related to errors during command input verification. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the command-line interface of the StarOS operating system, which allows a hacker to gain increased privileges
The vulnerability of the StarOS command-line interface is related to errors during command input verification. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Cisco Discovery Protocol implementation in the microsoftware-based IP camera of the Cisco Video Surveillance 8000 Series allows a intruder to execute arbitrary code.
The vulnerability of the Cisco Discovery Protocol implementation in Cisco Video Surveillance 8000 Series software-based IP cameras exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Intel Data Center Manager Console, a software tool for collecting and analyzing data on the performance, power consumption, and temperature of various devices, stems from insufficient verification of input data. This vulnerability allows attackers to disclose sensitive information that should be protected.
The vulnerability of the Intel Data Center Manager Console, a software tool for collecting and analyzing data on the performance, power consumption, and temperature of various devices, exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor...
The vulnerability of the ldb microprogramming software services for Qualcomm’s IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, and QCA9980 products exists due to insufficient verification of input data. This allows attackers to execute arbitrary codes.
The vulnerability of the ldb microprogramming software for Qualcomm’s IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, and QCA9980 products exists due to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...