CVE-2023-0011 Command Execution through Serial Interface of u-blox TOBY-L2

A flaw in the input validation in TOBY-L2 allows a user to execute arbitrary operating system commands using specifically crafted AT commands. This vulnerability requires physical access to the serial interface of the module or the ability to modify the system or software which uses its serial...

CVE-2023-47705

IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to manipulate username data due to improper input validation. IBM X-Force ID: 271228...

The vulnerability of the WDAC OLE DB component for SQL Server on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the WDAC OLE DB component for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the DHCP server service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ZTE MC801A 命令注入漏洞

The ZTE MC801A is a 5g indoor WiFi router from China's ZTE ZTE. The ZTE MC801A suffers from an input validation vulnerability in the handling of multiple network parameters, which can be exploited by a remote attacker to submit a special request that can be used in the application context to...

The vulnerability in the web interface of Cisco Firepower Management Center’s software management interface allows a perpetrator to execute arbitrary code.

The vulnerability of the web-based software management interface of the Cisco Firepower Management Center exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

PT-2023-9316 · Oracle · Oracle Enterprise Asset Management

Name of the Vulnerable Software and Affected Versions: Oracle Enterprise Asset Management versions 12.2.11 through 12.2.13 Description: The issue is related to insufficient input validation in the Work Definition Issues component of Oracle Enterprise Asset Management. This allows a low-privileged...

PT-2023-9067 · Oracle · Oracle Hospitality Simphony

Name of the Vulnerable Software and Affected Versions: Oracle Hospitality Simphony versions 19.1.0 through 19.5.4 Description: The issue is related to insufficient input validation in the Simphony Enterprise Server component. It allows an unauthenticated attacker with network access via HTTP to...

PT-2023-9068 · Oracle · Oracle Hospitality Simphony

Name of the Vulnerable Software and Affected Versions: Oracle Hospitality Simphony versions 19.1.0 through 19.5.4 Description: The issue is related to insufficient input validation in the Simphony Enterprise Server component of Oracle Hospitality Simphony, allowing a remote attacker to execute...

PT-2023-9050 · Oracle · Oracle Trade Management +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the Offer LOV component of Oracle Trade Management. It allows an unauthenticated attacker with network access via HT...

PT-2023-9536 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.4.2 and prior MySQL Server versions 9.0.1 and prior Description: The issue is related to insufficient protection of internal data due to incorrect input validation in the Server: Telemetry component of MySQL Server. Th...

PT-2023-9062 · Oracle · Oracle E-Business Suite +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the Campaign LOV component of the Oracle Marketing product. This can allow a remote attacker to gain unauthorized...

The vulnerability of the IBM DB2 database management system, which arises due to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the IBM DB2 database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions through a specially crafted query...

The vulnerability of the BlacklistedFilesChecker software module in SolarWinds Orion Platform allows a hacker to execute arbitrary code.

The vulnerability of the BlacklistedFilesChecker software for network monitoring on the SolarWinds Orion Platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code within the SYSTEM conte...

SEMCMS Security Breach

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A security vulnerability exists in SEMCMS version 3.9, which stems from a lack of security checking of input to the application. An attacker can exploit the vulnerability to inject malicious SQL commands...

Amazon Linux 2 : net-snmp (ALAS-2023-2366)

The version of net-snmp installed on the remote host is prior to 5.7.2-49. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2366 advisory. A flaw was found in net-snmp. A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an...

PT-2023-7698 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM DB2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description: The issue exists due to insufficient input validation in the system, allowing a remote attacker to cause a denial of service using a...

PT-2023-7737 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server version 11.5 Description: The issue is related to insufficient input validation, which can be exploited by a remote attacker to cause a denial of service. Specifically, when a...

Schweitzer Engineering Laboratories SEL-411L 安全漏洞

The Schweitzer Engineering Laboratories SEL-451 is a complete stand-alone system from Schweitzer Engineering Laboratories, USA. An input validation error vulnerability exists in the Schweitzer Engineering Laboratories SEL-451, which can be exploited by an authenticated, remote attacker to cause a...

tomcat: incorrectly parsed http trailer headers can cause request smuggling

A flaw was found in Apache Tomcat, where an improper input validation can occur. This flaw allows a malicious user to send a crafted request containing an invalid trailer header, which could be treated as multiple requests, potentially leading to request smuggling when behind a reverse proxy...