Citrix ADC 和 Citrix Gateway 输入验证错误漏洞

Citrix ADC is one of the most comprehensive application delivery and load balancing solutions from US-based Citrix, Inc. for application security, overall visibility and availability. An input validation error vulnerability exists in Citrix ADC and Citrix Gateway, which can be exploited by an...

FreshTomato 缓冲区错误漏洞

FreshTomato is a Linux-based open source firmware from FreshTomato Open Source. The firmware provides a variety of features for Broadcom-based routers. An input validation error vulnerability exists in FreshTomato version 2022.1, which stems from a specially crafted HTTP request that could lead t...

Contec SolarView Compact 输入验证错误漏洞

Contec SolarView Compact is an application system from Contec Japan. which provides photovoltaic power measurement systems. Contec SolarView Compact suffers from an input validation error vulnerability that stems from insufficient input validation provided in the image file management page. An...

CVE-2022-35650

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature...

SQLite 输入验证错误漏洞

SQLite is a lightweight database, a relational database management system that adheres to ACID. security vulnerabilities exist in versions prior to SQLite 3.39.2, which originate from the auxiliary C API. no details of the vulnerabilities are currently available...

OpenZeppelin 输入验证错误漏洞

OpenZeppelin is a software application. A standard for secure blockchain applications. An input validation error vulnerability exists in OpenZeppelin Contracts versions 4.0.0 through 4.7.1, which stems from its susceptibility to being recovered by the ERC165 Checker instead of returning false...

undici 输入验证错误漏洞

undici is an HTTP/1.1 client. undici suffers from an input validation error vulnerability that stems from the cookie header found in the specification to be a sensitive header and an official header, which remains unpurged. There are active users in undici that use cookie headers. This could resu...

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser from Google, Inc. and V8 is one of the open source JavaScript engines. Google Chrome suffers from an Input Validation Error vulnerability, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

Apple macOS Big Sur 输入验证错误漏洞

Apple macOS Big Sur is the 17th major release of Apple's macOS for MAC operating system from Apple USA. Apple macOS Big Sur suffers from an input validation error vulnerability that stems from an application that may be able to overwrite arbitrary files...

Oracle Financial Services Applications 输入验证错误漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking, and property management. An input validation error vulnerability exists in Oracle Banking Trade Finance component: Infrastructure version 14.5, whic...

Pexip Infinity Input Validation Error Vulnerability (CNVD-2022-54733)

Pexip Infinity is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity versions prior to 27.3 contain an input validation error vulnerability that can be exploited by remote, unauthenticated attackers to cause a denial of service...

Oracle MySQL 输入验证错误漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An input validation error vulnerability exists in Oracle MySQL version 8.0.28 and prior versions. The vulnerability originates from an attacker with...

Oracle Health Sciences Applications 输入验证错误漏洞

Oracle Health Sciences Applications is a suite of clinical research and development solutions for the healthcare industry from Oracle Corporation, and Health Sciences Data Management Workbench is one of the components that provides end-to-end clinical data management capabilities. An input...

Pexip Infinity Input Validation Error Vulnerability (CNVD-2022-54732)

Pexip Infinity is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity versions prior to 27.3 contain an input validation error vulnerability that can be exploited by remote, unauthenticated attackers to cause a denial of service...

Pexip Infinity Input Validation Error Vulnerability (CNVD-2022-54731)

Pexip Infinity is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity versions prior to 27.3 contain an input validation error vulnerability that can be exploited by remote, unauthenticated attackers to cause a denial of service...

Apache Xalan 输入验证错误漏洞

Apache Xalan is an open source software library from the Apache Foundation USA. Apache Xalan Java XSLT Stock in Input Validation Error vulnerability stems from an integer truncation issue when processing malicious XSLT stylesheets. The vulnerability can be exploited to corrupt Java class files...

Pexip Infinity Input Validation Error Vulnerability (CNVD-2022-54740)

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity is vulnerable to an input validation error that could be exploited by attackers to cause a denial of service...

Oracle Virtualization 输入验证错误漏洞

Oracle Virtualization is a virtualization solution from Oracle Corporation. It is used to unify and manage the entire hardware and software architecture from the application to the disk. Oracle Virtualization has a security vulnerability that could be exploited by an attacker to cause Oracle VM...

Oracle PeopleSoft Enterprise PeopleTools 输入验证错误漏洞

Oracle PeopleSoft Enterprise PeopleTools is Oracle's technology for providing PeopleSoft applications with the ability to stay in sync with users' needs and expectations. An input validation error vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools, which can be exploited by an...

Oracle MySQL 输入验证错误漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An input validation error vulnerability exists in Oracle MySQL Cluster 8.0.29 and earlier versions, which originates from an input validation error i...