Lucene search
K

4504 matches found

CNVD
CNVD
added 2021/02/03 12:0 a.m.10 views

HPE Aruba Airwave Glass Input Validation Error Vulnerability

HPE Aruba Airwave Glass is a smart glasses device from Hewlett-Packard HPE. An input validation error vulnerability previously existed in HPE Aruba Airwave Glass 1.3.3, which stemmed from insufficient input validation and could be exploited by an attacker to arbitrarily execute commands upstairs ...

10CVSS7.1AI score0.02912EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2021/02/03 12:0 a.m.23 views

Apple Mac OS X Security Updates (HT212147)-03

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.03142EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2021/02/03 12:0 a.m.17 views

Apple Mac OS X Security Updates (HT212147)-06

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.5AI score0.01027EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/02/02 12:0 a.m.7 views

Apport 输入验证错误漏洞

Apport is a toolkit for collecting and feeding back error messages information that the operating system considers useful when an application crashes. Apport is vulnerable to input validation errors, which can be exploited by local attackers to escalate privileges and run arbitrary code...

8.8CVSS7.2AI score0.00525EPSS
Exploits1References5
CNNVD
CNNVD
added 2021/02/02 12:0 a.m.4 views

Google Android Input Validation Error Vulnerability

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android 11 suffers from an input validation error vulnerability that stems from an integer overflow in ged, where a write overrun is possible. This could result in a local escalatio...

6.7CVSS6.8AI score0.00155EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/02/02 12:0 a.m.4 views

Apport 输入验证错误漏洞

Apport is a toolkit for collecting and feeding back error messages information that the operating system considers useful when an application crashes. Apport is vulnerable to input validation errors, which can be exploited by local attackers to escalate privileges and run arbitrary code...

8.8CVSS7.2AI score0.00432EPSS
Exploits1References4
CNNVD
CNNVD
added 2021/02/02 12:0 a.m.4 views

Apple ImageIO Input Validation Error Vulnerability

Apple ImageIO is an Apple Inc. component necessary for parsing and writing image data in IOS mobile devices. Apple ImageIO suffers from an input validation error vulnerability that stems from insufficient validation of user-supplied input when processing image files in the ImageIO component in...

5.5CVSS6.1AI score0.00814EPSS
Exploits0References8
CNNVD
CNNVD
added 2021/02/02 12:0 a.m.5 views

Google Android 命令注入漏洞

Google Android is a Linux-based open source operating system of the Google Open Handheld Alliance Google. Google Android 11 suffers from an input validation error vulnerability that originates from a mobilelogd input validation error, which can be exploited by an attacker to cause a local...

6.7CVSS6.7AI score0.0033EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/02/01 12:0 a.m.6 views

Qualcomm UTILS Input Validation Error Vulnerability

Qualcomm UTILS is a Qualcomm Incorporated USA support component used in chips. A security vulnerability exists in Qualcomm UTILS that originates from a BSI module that may result in memory corruption due to improper parameter count validation...

7.8CVSS7.1AI score0.00161EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/02/01 12:0 a.m.4 views

Qualcomm HLOS Input Validation Error Vulnerability

Qualcomm HLOS is a Qualcomm Advanced Operating Platform component used in Qualcomm products. An input validation error vulnerability exists in Qualcomm HLOS, where writes and reads are made out-of-bounds in the TA due to improper checking of the length of the command and response buffers...

7.8CVSS7.1AI score0.00161EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/02/01 12:0 a.m.4 views

Qualcomm Audio Input Validation Error Vulnerability

Qualcomm Audio is an audio device software from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Audio where access to global control elements may be out of bounds due to a competitive condition...

7.8CVSS7.1AI score0.00161EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/02/01 12:0 a.m.4 views

Qualcomm IPC Input Validation Error Vulnerability

Qualcomm IPC is a Qualcomm Incorporated USA support component used in chips. A security vulnerability exists in Qualcomm IPC that stems from a lack of checking the validity and boundary compliance of parameters read from shared memory...

7.8CVSS7.1AI score0.00161EPSS
Exploits0References4
CNVD
CNVD
added 2021/01/30 12:0 a.m.7 views

Red Hat Mobile Aplication Platform Input Validation Error Vulnerability

Red Hat Mobile Aplication Platform is a mobile application development platform from Red Hat, Inc. The application orchestrates large-scale mobile application development plus supports everything from pre-packaged, no-code mobile solutions to fully customized solutions to mobile-integrated...

6.1CVSS6.8AI score0.01EPSS
Exploits0References1
CNVD
CNVD
added 2021/01/29 12:0 a.m.9 views

Google Android Input Validation Error Vulnerability (CNVD-2021-07510)

Google Android is a Linux-based open source operating system from Google and the Open Handheld Consortium Google. An input validation error vulnerability exists in A2DPGetCodecType for Google Android, which arises from the possibility that a program could read out-of-bounds due to improper input...

7.5CVSS6.6AI score0.0077EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/01/29 12:0 a.m.4 views

Mitel BusinessCTI Enterprise (MBC-E) Client Input Validation Error Vulnerability

Mitel Networks BusinessCTI Enterprise is an employee communication software for attendance management and instant messaging from Mitel Networks Canada. Mitel BusinessCTI Enterprise MBC-E Client for Windows before 6.4.15 and 7.x before 7.1.2 An input validation error vulnerability exists, which...

8CVSS7.2AI score0.00875EPSS
Exploits0References3
CNVD
CNVD
added 2021/01/28 12:0 a.m.10 views

Red Hat Undertow Denial of Service Vulnerability

Red Hat Undertow is a U.S. Red Hat Red Hat, a Java-based embedded Web server, is the default Web server Wildfly Java application server. Red Hat Undertow suffers from a denial of service vulnerability that originates from an input validation error to a user, which can be exploited by an attacker ...

7.8CVSS7.3AI score0.01269EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/01/27 12:0 a.m.3 views

Sourceforge PhpGACL Input Validation Error Vulnerability

Sourceforge PhpGACL is a pluggable platform based on Php, Mysql used to provide access control for platforms organized by Sourceforge. An input validation error vulnerability exists in phpGACL 3.3.7, which stems from an OPEN redirection vulnerability in the return page redirection feature. An...

6.1CVSS6.5AI score0.01879EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/01/26 12:0 a.m.6 views

Opera Software Opera Input Validation Error Vulnerability

Opera Software Opera is a web browser from the Norwegian company Opera Software that supports multi-window browsing, customizable user interfaces, and other features. An input validation error vulnerability exists in Opera Software Opera. An attacker can exploit this vulnerability to execute...

9.8CVSS7.5AI score0.01848EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/01/26 12:0 a.m.6 views

Bitcoin Core Input Validation Error Vulnerability

Bitcoin Core is an open source client for verifying the validity of blockchain transactions. An input validation error vulnerability exists in Bitcoin Core version 0.21.0 and prior versions, which stems from the ability to create a new file in an arbitrary directory via a dumpwallet RPC call...

7.5CVSS7.2AI score0.01172EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/01/24 12:0 a.m.3 views

Revive Adserver 输入验证错误漏洞

Revive Adserver is an open source advertising management system from the Revive Adserver team. The system provides ad placement, ad space management, data statistics and other functions. An input validation error vulnerability exists in Revive Adserver versions prior to 5.1.0, which stems from an...

6.1CVSS6.4AI score0.66141EPSS
Exploits3References7
Rows per page
Query Builder