Lucene search
K

4504 matches found

CNVD
CNVD
added 2021/07/09 12:0 a.m.9 views

Huawei P30 Input Validation Error Vulnerability (CNVD-2021-51440)

Huawei P30 is a smartphone from Chinese company Huawei Huawei. An input validation error vulnerability exists in the Huawei P30, which stems from a vulnerability in the product's Bluetooth module's handling of broadcast data, and can be exploited by an attacker to install the app to send a specif...

5.5CVSS6.7AI score0.00166EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/07/08 12:0 a.m.3 views

Samsung Tizen 输入验证错误漏洞

Samsung Tizen is an open source Linux kernel-based mobile operating system from South Korea's Samsung, available for devices including smartphones, tablets, smartwatches, netbooks, in-vehicle messaging and entertainment devices, and smart TVs. The input validation error vulnerability exists in...

9.8CVSS8.8AI score0.01641EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/07/08 12:0 a.m.4 views

Samsung Mobile AR Emoji Editor 输入验证错误漏洞

Samsung AR Emoji Editor is an emoji editor from Samsung South Korea. An input validation error vulnerability exists in Samsung Mobile AR Emoji Editor. An attacker could use this vulnerability to allow an untrusted application to access arbitrary files with escalated privileges...

7.8CVSS5.8AI score0.00246EPSS
Exploits0References1
CNVD
CNVD
added 2021/07/08 12:0 a.m.7 views

Google TensorFlow Input Validation Error Vulnerability (CNVD-2021-48858)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow 2.4.2, 2.3.3, 2.2.3, 2.1.4 suffers from an input validation error vulnerability that can be exploited by an attacker to cause a denial of service...

5.5CVSS6.5AI score0.00189EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/07/07 12:0 a.m.4 views

Huawei P30 输入验证错误漏洞

Huawei P30 is a smartphone from Chinese company Huawei Huawei. An input validation error vulnerability exists in the Huawei P30, which stems from a vulnerability in the product's Bluetooth module's handling of broadcast data, and can be exploited by an attacker to install the app to send a specif...

5.5CVSS5.6AI score0.00166EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/07/07 12:0 a.m.3 views

Pexip Infinity 输入验证错误漏洞

Pexip Infinity Pexip video conferencing cloud collaboration platform is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity's call setup is vulnerable to an input validation error. An unauthenticated remote attacker can use this vulnerability to trigg...

7.5CVSS5.7AI score0.01328EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/07/07 12:0 a.m.11 views

hyperium hyper 输入验证错误漏洞

hyperium hyper is an open source HTTP library for Rust. It is intended to be a building block for libraries and applications. An input validation error vulnerability exists in hyperium hyper, which stems from an integer overflow that may be triggered when decoding too large of a block size in...

9.1CVSS8.2AI score0.01124EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/07/07 12:0 a.m.20 views

Joomla! CMS 输入验证错误漏洞

is a set of forum components used in the Joomla! content management system. Joomla! is vulnerable to an input validation error in versions 2.5.0 to 3.9.27, which can be exploited by attackers to cause corruption in the usergroups table...

7.5CVSS5.6AI score0.01439EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/07/07 12:0 a.m.4 views

Pexip Infinity 输入验证错误漏洞

Pexip Infinity is a cloud collaboration platform for video conferencing from Pexip Norway. The product provides high-quality and secure cloud conferencing capabilities. An input validation error vulnerability exists in Pexip Infinity, which can be exploited by an attacker to cause a denial of...

7.5CVSS5.7AI score0.01328EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/07/06 12:0 a.m.1 views

NPort IA5000A-I/O Series 输入验证错误漏洞

MOXA Moxa NPort IA5150A Series is an industrial control device server from China Moxa MOXA. for 1-port RS-232 / 422/485 industrial automation device servers with serial/LAN/power surge protection, two 10/100BaseTX ports with single IP, and operating temperatures from 0 to 60°C. The Moxa NPort...

7.8CVSS7.4AI score0.01623EPSS
Exploits0References4
CNVD
CNVD
added 2021/07/06 12:0 a.m.9 views

Kaseya VSA Input Validation Error Vulnerability

Kaseya VSA RMM is a remote monitoring and terminal management solution from Kaseya, Switzerland. Kaseya VSA suffers from an input validation error vulnerability that arises from a network system or product that does not properly validate incoming data. A remote attacker could exploit this...

10CVSS6.9AI score0.85619EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/07/05 12:0 a.m.6 views

Kaseya VSA 输入验证错误漏洞

Kaseya VSA RMM is a remote monitoring and terminal management solution from Kaseya, Switzerland. Kaseya VSA suffers from an input validation error vulnerability that arises from a network system or product that does not properly validate incoming data. A remote attacker could exploit this...

10CVSS5.7AI score0.85619EPSS
Exploits1References6
CNNVD
CNNVD
added 2021/07/05 12:0 a.m.4 views

Qualcomm 芯片输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits including primarily semiconductor devices, but also passive components, etc. and is from time to time fabricated on the surface of semiconductor wafers. qualcomm Multiple products are vulnerable to an input...

7.5CVSS7.4AI score0.00587EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/07/05 12:0 a.m.5 views

多款Qualcomm产品输入验证错误漏洞

Qualcomm QCA6574AU and others are products of Qualcomm Incorporated Qualcomm.QCA6574AU is a central processing unit CPU product.SDX55 is a modem.IPQ6018 is a central processing unit CPU product. qualcomm An input validation error vulnerability exists in multiple products, which stems from a lack ...

10CVSS8.8AI score0.03016EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/07/02 12:0 a.m.3 views

Zimbra Collaboration Suite 输入验证错误漏洞

Zimbra Collaboration Suite ZCS is a collaboration software suite that includes an email server and web client. An open redirection vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite. An attacker obtaining a valid zimbra authentication token or a valid preauth token could...

6.1CVSS5.6AI score0.00971EPSS
Exploits0References5
CNVD
CNVD
added 2021/07/01 12:0 a.m.24 views

Huawei Emui and Magic UI input validation error vulnerability

Huawei Emui is a mobile operating system based on Android, and Magic Ui is a mobile operating system based on Android. Huawei Emui and Magic UI are vulnerable to an input validation error, which is caused when the device does not validate the input data. The vulnerability can be exploited to caus...

7.5CVSS2AI score0.00765EPSS
Exploits0Affected Software2
CNVD
CNVD
added 2021/07/01 12:0 a.m.5 views

Jenkins CAS Plugin Input Validation Error Vulnerability

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plug-ins to support building, deploying and automating any project . An input validation error vulnerability exists in Jenkins CAS Plugin 1.6.0 and earlier versions, which stems from Jenki...

6.1CVSS6.4AI score0.01584EPSS
Exploits0References1
CNVD
CNVD
added 2021/07/01 12:0 a.m.7 views

Apache Traffic Server Input Validation Error Vulnerability (CNVD-2021-48874)

Apache Traffic Server or ATS or TS for short , is a high-performance , modular HTTP proxy and caching server . An improper input validation vulnerability exists in HTTP/2 in Apache Traffic Server versions 7.0.0 - 7.1.12, 8.0.0 - 8.1.1, 9.0.0 - 9.0.1. An attacker could exploit this vulnerability t...

7.5CVSS6.6AI score0.02515EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/07/01 12:0 a.m.2 views

EasyApache 输入验证错误漏洞

PHP is a scripting language that executes on the server side. PHP suffers from an input validation error vulnerability that can be exploited by an attacker to spoof a user via PHP's FILTERVALIDATEURL in order to redirect them to a malicious site...

5.3CVSS7AI score0.01945EPSS
Exploits1References25
CNNVD
CNNVD
added 2021/07/01 12:0 a.m.5 views

Johnson Controls C-CURE 输入验证错误漏洞

Johnson Controls C-CURE is a site server from Johnson Controls, Inc. It is a cost-effective access control solution for small sites requiring up to 64 card readers. An input validation error vulnerability exists in the Johnson Controls C-CURE 9000, which stems from the auto-update feature of the...

8.8CVSS7.9AI score0.02096EPSS
Exploits0References6
Rows per page
Query Builder