Microsoft Lightweight Directory Access Protocol 输入验证错误漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation. Microsoft Windows LDAP is vulnerable to remote code execution, which can be exploited by attackers to execute code on the target host...

Microsoft Lightweight Directory Access Protocol 输入验证错误漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation. Microsoft Windows LDAP is vulnerable to remote code execution, which can be exploited by attackers to execute code on the target host...

Microsoft Excel 输入验证错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Office Excel. The following products and editions are affected:Microsoft Office 2019 for 32-bit editions,Microsoft Office 2019 for...

Microsoft SharePoint Server 输入验证错误漏洞

Microsoft SharePoint is a suite of enterprise business collaboration platforms from Microsoft Corporation. Microsoft SharePoint Server is vulnerable to a remote code execution vulnerability that can be exploited to cause arbitrary code execution...

Microsoft Visual Studio Code 输入验证错误漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in Microsoft Visual Studio Code, which arises from a failure of a networked system or product to properly filter specific elements of externally entered data during the...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-47670)

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which originates in checkSlicePermission in SliceManagerService.java, due to an input validation error, it is possible to access any slice URI, and an...

IBM Maximo Asset Management Input Validation Error Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. IBM Maximo Asset Management versions 7.6.1.1 and 7.6.1.2 are vulnerable due to an input validation error in the HOST header, which can be exploited by remote attackers to by sending a...

F5 BIG-IP Input Validation Error Vulnerability (CNVD-2022-79943)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing, etc. F5 BIG-IP has an input validation error vulnerability that could be exploited by an attacker to cause a denial of service on the BIG-IP syste...

KeepKey firmware 输入验证错误漏洞

KeepKey firmware is an open source KeepKey device firmware from KeepKey USA. A security vulnerability exists in KeepKey versions prior to 7.3.2, which stems from lib/board/supervise.c incorrectly handling the svhandlerflash address range check...

Keylime 输入验证错误漏洞

Keylime is an open source extensible trust system for Keylime that utilizes TPM technology. A security vulnerability exists in Keylime. An attacker exploiting this vulnerability could cause the application to crash...

IBM Robotic Process Automation 输入验证错误漏洞

IBM Robotic Process Automation is a robotic process automation product from IBM Corporation. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. IBM Robotic Process Automation suffers from an input validation error vulnerability that stems fro...

F5 BIG-IP 输入验证错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. F5 BIG-IP is vulnerable to an input validation error, which can be exploited by attackers to cause a denial of service on the...

F5 BIG-IP 输入验证错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. F5 BIG-IP suffers from an input validation error vulnerability that can be exploited by attackers to cause service degradatio...

GitLab 输入验证错误漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. An input validation error vulnerability exists in Gitlab Community Edition...

GitLab 输入验证错误漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. An input validation error vulnerability exists in Gitlab Community Edition...

Mozilla Firefox 输入验证错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security signature issue vulnerability exists in Mozilla Firefox versions prior to 100.0 that stems from Firefox for Android not properly logging and retaining HSTS settings. An attacker can exploit...

多款MediaTek产品输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek. A security vulnerability exists in various MediaTek products, which stems from a stack-based buffer overflow that may result in out-of-bounds writes and can be exploited by an attacker to cause an escalation of...

MediaTek 多款产品输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek. A security vulnerability exists in various MediaTek products, which stems from an integer overflow that may be reused after release, and can be exploited by an attacker to cause a local privilege escalation. The...

Hitachi Energy RTU500 输入验证错误漏洞

Hitachi Energy RTU500 is a series of industrial control components from Hitachi, Ltd Hitachi, Japan. The Hitachi Energy RTU500 suffers from an input validation error vulnerability that stems from a length information validation error carried in MBAP. An attacker could exploit the vulnerability by...

Qualcomm 输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits including primarily semiconductor devices, but also passive components, etc. and from time to time fabricated on the surface of semiconductor wafers. A security vulnerability exists in the Modem module of...