The vulnerability of the fly-weather software package for the Astra Linux operating system, related to a validation error in the input data received from web servers, allows attackers to perform spoofing attacks.

The vulnerability of the fly-weather software package for the Astra Linux operating system is related to a validation error in the input data received from web servers. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

Cisco IOS XR Input Validation Error Vulnerability

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. An input validation error vulnerability exists in the Border Gateway Protocol BGP feature in Cisco IOS XR, which arises from the program failing to properly handle BGP update...

Magento Input Validation Error Vulnerability (CNVD-2019-39385)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions . A security vulnerability exists in Magento version 2.1 before 2.1.18, version 2.2 before 2.2.9, and version 2.3...

Pulse Secure Pulse Connect Secure Input Validation Error Vulnerability

Pulse Secure Pulse Connect Secure a.k.a. PCS, formerly known as Juniper Junos Pulse is a suite of SSL VPN solutions from Pulse Secure in the United States. Pulse Secure Pulse Connect Secure 8.3R2. An input validation error vulnerability exists in the loginmeeting.cgi file in previous versions of...

IBM DB2 Input Validation Error Vulnerability

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. An input validation error vulnerability exists in IBM DB2. An attacker could exploit this vulnerabilit...

Magento Input Validation Error Vulnerability

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions . Magento 2.1.18 before version 2.1, 2.2.9 before version 2.2 and 2.3.2 before version 2.3 there is a security...

Exiv2 Input Validation Error Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by Andreas Huggel programmers. The product provides the ability to read and write image metadata in a variety of formats including EXIF, IPTC and XMP. An input validation error vulnerability exists in Exiv2...

Exiv2 Input Validation Error Vulnerability (CNVD-2019-34820)

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by Andreas Huggel programmers. The product provides the ability to read and write image metadata in a variety of formats including EXIF, IPTC and XMP. An input validation error vulnerability exists in Exiv2...

Exiv2 Input Validation Error Vulnerability (CNVD-2019-34822)

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by Andreas Huggel programmers. The product provides the ability to read and write image metadata in a variety of formats including EXIF, IPTC and XMP. An input validation error vulnerability exists in Exiv2...

Exiv2 Input Validation Error Vulnerability (CNVD-2019-34821)

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by Andreas Huggel programmers. The product provides the ability to read and write image metadata in a variety of formats including EXIF, IPTC and XMP. An input validation error vulnerability exists in Exiv2...

STOPzilla AntiMalware Input Validation Error Vulnerability

STOPzilla AntiMalware is a set of antivirus software from the American company STOPzilla that is mainly used for malware detection and killing. An input validation error vulnerability exists in STOPzilla AntiMalware version 6.5.2.59. The vulnerability originates from a network system or product...

OrangeHRM <= 4.3.1 RCE Vulnerability

OrangeHRM is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MantisBT 2.1.0 - 2.17.0 'View Filters' And 'Edit Filter' Pages XSS Vulnerability

MantisBT is prone to a cross-site-scripting XSS vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Cisco Prime Service Catalog Input Validation Error Vulnerability

Cisco Prime Service Catalog PSC is a service catalog solution from Cisco that provides all IT services through a single portal. The solution supports automated ordering of a unified service catalog for compute, network, storage, and other data center resources. An input validation error...

CVE-2019-12839

In OrangeHRM 4.3.1 and before, there is an input validation error within admin/listMailConfiguration txtSendmailPath parameter that allows authenticated attackers to achieve arbitrary command execution...

CVE-2019-12839

OrangeHRM 4.3.1 and earlier versions contain an input validation flaw in admin/listMailConfiguration (txtSendmailPath) that allows authenticated attackers to achieve arbitrary command execution. Affected component is the listMailConfiguration path within OrangeHRM’s admin area; root cause is inpu...

Intel NUC Kit Input Validation Error Vulnerability (CNVD-2019-42733)

The Intel NUC Kit is a small desktop computer from Intel Corporation USA. An input validation error vulnerability exists in the system firmware in the Intel NUC Kit. The vulnerability originates from a network system or product that does not properly validate incoming data. An attacker could...

Intel Open Cloud Integrity Technology Input Validation Error Vulnerability

Intel Open Cloud Integrity Technology CIT is a set of solutions from Intel Corporation USA for establishing a hardware root of trust and building a chain of trust between hardware, operating systems, hypervisors, virtual machines and Docker containers. An input validation error vulnerability exis...

SweetScape Software 010 Editor Input Validation Error Vulnerability (CNVD-2019-27314)

SweetScape Software 010 Editor is a text editor from SweetScape Software Canada. An input validation error vulnerability exists in SweetScape Software 010 Editor version 9.0.1. The vulnerability stems from a networked system or product that does not properly validate input data. An attacker could...

SweetScape Software 010 Editor Input Validation Error Vulnerability (CNVD-2019-27315)

SweetScape Software 010 Editor is a text editor from SweetScape Software Canada. An input validation error vulnerability exists in SweetScape Software 010 Editor version 9.0.1. The vulnerability stems from a networked system or product that does not properly validate input data. An attacker could...