Lucene search
K

4504 matches found

CNNVD
CNNVD
added 2021/04/29 12:0 a.m.3 views

Samsung Galaxy Gear Series Tizen 输入验证错误漏洞

Samsung Galaxy Gear Series Tizen is a smartwatch from Samsung South Korea. Samsung Tizen RT RTOS version 3.0.GBB suffers from an input validation error vulnerability that stems from the effects of integer wrapping in the functions calloc and mm zalloc. This incorrect memory allocation could lead ...

7.5CVSS7.5AI score0.01105EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/04/29 12:0 a.m.3 views

NVIDIA vGPU Software 输入验证错误漏洞

NVIDIA vGPU Software is a management software from NVIDIA that is used to provide GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. An input validation...

7.8CVSS7.2AI score0.0025EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/04/29 12:0 a.m.4 views

Mongoose-OS 输入验证错误漏洞

Mongoose-OS is an application system. A platform for managing IoT projects. Cesanta Software Mongoose-OS v2.17.0 suffers from an Input Validation Error vulnerability that stems from incorrect memory allocation could lead to arbitrary memory allocation, which could result in unexpected behavior su...

9.8CVSS8.9AI score0.01455EPSS
Exploits0References6
CNNVD
CNNVD
added 2021/04/29 12:0 a.m.5 views

Texas Instruments TI-RTOS-MCU 输入验证错误漏洞

The Texas Instruments TI-RTOS-MCU is an application system from Texas Instruments, Inc. A real-time operating system RTOS for microcontrollers MCUs. Texas Instrument TI-RTOS suffers from an input validation error vulnerability that stems from the fact that when configured to use the HeapMem heap...

7.8CVSS6.3AI score0.00279EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/04/29 12:0 a.m.5 views

uClibc-ng 输入验证错误漏洞

uclibc-ng is an application. Small C library for Linux. An input validation error vulnerability exists in versions prior to uClibc-ng 1.0.37, which stems from being susceptible to integer wrapping by the malloc-simple function. This incorrect memory allocation could lead to arbitrary memory...

9.8CVSS6.3AI score0.01455EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/04/29 12:0 a.m.5 views

Tencent OS-tiny 输入验证错误漏洞

Tencent OS-tiny is a real-time operating system developed by Tencent for the Internet of Things IoT. It is characterized by low power consumption, low resource consumption, modularity, security and reliability, which can effectively improve the development efficiency of IoT terminal products. An...

9.8CVSS8.9AI score0.01353EPSS
Exploits0References4
CNVD
CNVD
added 2021/04/28 12:0 a.m.6 views

IBM Spectrum Scale File Overwrite Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

6CVSS6.4AI score0.00223EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/04/28 12:0 a.m.5 views

Redmine 输入验证错误漏洞

Redmine is a set of open source Web-based project management and defect tracking tools . The product provides project management , issue tracking and role-based access control and other features . An input validation error vulnerability exists in Redmine versions prior to 4.0.9, 4.1.x series...

7.5CVSS7.2AI score0.01737EPSS
Exploits0References6
CNVD
CNVD
added 2021/04/28 12:0 a.m.7 views

Apache Superset Input Validation Error Vulnerability

Apache Superset up is the United States Apache company to provide a large distributed environment in the horizontal scaling design applications. An input validation error vulnerability exists in Apache Superset 1.0.1 and earlier versions, which arises from unchecked user input that opens a redire...

6.1CVSS6.5AI score0.63768EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/04/28 12:0 a.m.5 views

Huawei IPS Module和Huawei USG9500 输入验证错误漏洞

Huawei IPS Module is an intrusion prevention system IPS module. Huawei USG9500 is a firewall appliance used in large environments. An information disclosure vulnerability exists in several Huawei products, which stems from a block that does not adequately validate input. An attacker with elevated...

4.9CVSS5.5AI score0.00563EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/04/28 12:0 a.m.2 views

LZ4 输入验证错误漏洞

LZ4 is a lossless compression algorithm. LZ4 1:1.9.3-1 suffers from an input validation error vulnerability that stems from potential memory corruption due to an integer overflow bug that causes a memmove parameter to become negative...

9.8CVSS7.3AI score0.03216EPSS
Exploits0References53
CNNVD
CNNVD
added 2021/04/27 12:0 a.m.3 views

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in macOS, which arises from insufficient user-supplied input validation within the ImageIO component. The following products and versions are affected: macOS: 11...

7.8CVSS7.3AI score0.00943EPSS
Exploits0References6
CNNVD
CNNVD
added 2021/04/27 12:0 a.m.3 views

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in macOS, which arises from insufficient user-supplied input validation within the ImageIO component. The following products and versions are affected: macOS: 11...

7.8CVSS7.3AI score0.01144EPSS
Exploits0References8
CNNVD
CNNVD
added 2021/04/27 12:0 a.m.1 views

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in macOS, which stems from insufficient validation of user-supplied input within the ImageIO component. 10.14.4 18E226, 10.14.4 18E227, 10.14.5 18F132, 10.14.6...

7.8CVSS7.3AI score0.01264EPSS
Exploits0References11
CNNVD
CNNVD
added 2021/04/27 12:0 a.m.2 views

NLnet Labs Unbound 输入验证错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the region allocator in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability to cause an integer overflow via regionalloc...

9.8CVSS5.7AI score0.02179EPSS
Exploits0References17
CNNVD
CNNVD
added 2021/04/27 12:0 a.m.3 views

Subreddit Home Automation 输入验证错误漏洞

Subreddit Home Automation is an automation device for the Subreddit community. An automated electric light. A security vulnerability exists in HomeAutomation 3.3.2, which stems from the input passed in the redirect GET parameter in the api.php script not being properly validated before it is used...

6.1CVSS6.4AI score0.01319EPSS
Exploits2References3
CNNVD
CNNVD
added 2021/04/27 12:0 a.m.2 views

NLnet Labs Unbound 输入验证错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the size calculation in respip/respip.c in versions of Unbound prior to 1.9.5. No detailed vulnerability details are provided at this time...

9.8CVSS5.6AI score0.02037EPSS
Exploits0References18
CNNVD
CNNVD
added 2021/04/27 12:0 a.m.2 views

Unbound 输入验证错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in sldnsstr2wirednamebuforigin in versions of Unbound prior to 1.9.5. An attacker could exploit this vulnerability to cause an out-of-bounds write...

9.8CVSS8.4AI score0.02037EPSS
Exploits0References17
CNVD
CNVD
added 2021/04/22 12:0 a.m.7 views

Github authelia input validation error vulnerability

Github authelia is an application from Github USA. An open source authentication and authorization server that provides 2-factor authentication and single sign-on SSO to applications through a web portal. Authelia version 4.27.4 and prior versions contain an input validation error vulnerability...

5.7CVSS6.9AI score0.0051EPSS
Exploits0References1
CNVD
CNVD
added 2021/04/22 12:0 a.m.10 views

Cisco SD-WAN vManage Input Validation Error Vulnerability

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. Cisco SD-WAN vManage Software has an input validation error vulnerability that originates as a result of insufficient authorization checks. ...

6.4CVSS6.5AI score0.00608EPSS
Exploits0References1
Rows per page
Query Builder