Caleb Doxsey Pomerium 输入验证错误漏洞

Pomerium is an identity agent that gives you secure access to internal applications. An open redirection vulnerability exists in versions of Pomerium prior to 0.13.4. No detailed vulnerability details are provided at this time...

Dell Wyse ThinOS 输入验证错误漏洞

DELL Wyse ThinOS is a lightweight operating system designed for thin client devices, focused on providing a secure and efficient virtual desktop access experience. An input validation error vulnerability exists in DELL Wyse ThinOS, which can be exploited by an attacker to alter device configurati...

Wyse Management Suite 输入验证错误漏洞

Wyse Management Suite is a next-generation management solution that enables you to centrally configure, monitor, manage and optimize Wyse thin clients. A denial of service vulnerability exists in Wyse Management Suite versions prior to 3.2. An attacker could exploit this vulnerability to cause a...

Vivo appstore input validation error vulnerability

Vivo AppStore is a mobile app from China Vivo. It is used to download APP. A security vulnerability exists in appstore versions prior to 8.12.0.0, which can be exploited by an attacker to remotely download and install apps via carefully constructed parameters...

LIM OpenEXR 输入验证错误漏洞

Industrial Light And Magic LIM OpenEXR is an image file format from Industrial Light and Magic LIM, USA, for high dynamic range HDR images. An input validation error vulnerability exists in OpenEXR B44 uncompression, which can be exploited by an attacker to trigger a shift overflow and potentiall...

Ilch 输入验证错误漏洞

Ilch is an open source content management system CMS. A security vulnerability exists in Ilch CMS version 2.1.42 that allows an attacker to redirect users to the attacker's site after a successful login...

Aruba Instant Access Point 输入验证错误漏洞

Aruba Access Points is a wireless network from Aruba USA. It provides Internet access. A security vulnerability exists in Aruba Instant Access Points, which can be exploited by an attacker to remotely modify arbitrary files. The following products and versions are affected: Aruba Instant 6.4.x:...

Aruba Access Points 输入验证错误漏洞

Aruba Instant is a cloud-hosted controller-less wireless access point. Aruba Instant has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Aruba Access Points 输入验证错误漏洞

Aruba Access Points is a wireless network from Aruba USA. It provides Internet access. A security vulnerability exists in Aruba Instant Access Points, which can be exploited by an attacker to remotely create arbitrary directories. The following products and versions are affected: Aruba Instant...

Aruba Access Points 输入验证错误漏洞

Aruba Instant is a cloud-hosted controller-less wireless access point. Aruba Instant suffers from an arbitrary file modification vulnerability that can be exploited by an attacker via a command line interface to overwrite arbitrary files with content under their control...

Aruba Instant Access Point 输入验证错误漏洞

Aruba Access Points is a wireless network from Aruba USA. It provides Internet access. A security vulnerability exists in Aruba Instant Access Points, which can be exploited by an attacker to remotely modify arbitrary files. The following products and versions are affected: Aruba Instant 6.4.x:...

Genivia gSOAP 输入验证错误漏洞

Genivia gSOAP is a C/C++ software development toolkit with automatic coding capabilities from Genivia, USA. A security vulnerability exists in Genivia gSOAP version 2.8.107, which stems from an exception in the handling of user input by the program, and can be exploited by an attacker to cause...

OMERO.web 输入验证错误漏洞

OMERO.web is a client program from the Open Microscopy Environment team for viewing images on the OMERO server from a web browser. A security vulnerability exists in OMERO.web that allows redirection to untrusted sites...

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. A denial of service vulnerability exists in SAP 3D Visual Enterprise Viewer version 9. The vulnerability stems from improper input validation. An attacker could exploit the vulnerability by means of a specially crafted...

Wordpress Contact Form 7 Database Addon plugin input validation error vulnerability

Wordpress Contact Form 7 Database Addon is an open source application plugin for Wordpress. This plugin is used to save Contact Form 7 submissions to your WordPress database. An input validation error vulnerability exists in versions of the Contact Form 7 Database Addon plugin prior to 1.2.5.6,...

Google Android elevation of privilege vulnerability (CNVD-2021-24959)

Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from an input validation error in DeltaPerformer :: Write in deltaperformer.cc. An attacker can...

中兴 ZTE ZXONE 8700 输入验证错误漏洞

ZTE zxone and so on are products of ZTE Corporation ZTE in China. zxone is a series of new unified switching OTN devices for 100G and ultra-100G. zte ZXONE 8700 is an OTN crossover device. zte9 ZTE ZXONE 9700 and so on are products of ZTE Corporation ZTE9 in China. zte ZXONE 9700 is a metro netwo...

Linux kernel input validation error vulnerability (CNVD-2021-21917)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from an input validation error vulnerability that can be exploited by attackers to cause users to crash their systems or potentially escalate their...

Netgear NETGEAR JGS516PE 输入验证错误漏洞

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. An integer overflow vulnerability exists in the Web Management Panel of the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. An attacker could exploit this vulnerability to cause a denial of service...

Secomea SiteManager Input Validation Error Vulnerability

Secomea SiteManager is a software application from Secomea, Denmark. It provides a remote maintenance function for industrial equipment. An input validation error vulnerability exists in Secomea SiteManager versions prior to 9.4.620527004, which arises from a network system or product that does n...