Joomla! 输入验证错误漏洞

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! versions 4.2.0 through 4.3.1, which stems from a lack of input validation and can lead to open redirects and cross-site scripting XSS...

The vulnerability of Rockwell Automation’s distributed controller software ArmorStart ST, related to deficiencies in input data validation by users, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST distributed controllers is related to deficiencies in the validation of user-input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks remotely...

IBM PowerVM Hypervisor 输入验证错误漏洞

IBM PowerVM Hypervisor is an application from International Business Machines IBM, Inc. provides a secure and scalable virtualized environment for applications built on the advanced RAS features and leading performance of the Power Systems platform. An input validation error vulnerability exists ...

The vulnerability of the Ribose RNP library in the Thunderbird email client allows a hacker to cause a service failure.

The vulnerability of the Ribose RNP library in the Thunderbird email client is related to insufficient validation of input data during the analysis of PKESK/SKESK packets. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2023-20077

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device. These vulnerabilities are due to insufficient input validation. An attacker cou...

webkitgtk: memory disclosure issue was addressed with improved memory handling

A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution...

PT-2023-3384 · Tenda · Tenda Ac5

Name of the Vulnerable Software and Affected Versions: Tenda AC5 router version V15.03.06.28 Description: The issue is related to insufficient input validation in the Tenda AC5 router's firmware, which can be exploited by a remote attacker to execute arbitrary code using the Mac parameter at the...

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing allows a malicious individual to gain unauthorized access to the device or cause a partial service failure.

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the device remotely, or cause a partial service...

The vulnerability of the Security component of the Oracle BI Publisher software allows a perpetrator to disclose protected information.

The vulnerability of the Security component of the Oracle BI Publisher software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through HTTP requests...

CVE-2022-38787

Improper input validation in firmware for some IntelR FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalation of privilege via local access...

Schweitzer Engineering Laboratories Real Time Automation Controller 输入验证错误漏洞

Schweitzer Engineering Laboratories Real Time Automation Controller SEL RTAC is a powerful and versatile automation platform from Schweitzer Engineering Laboratories. A security vulnerability exists in the Schweitzer Engineering Laboratories Real Time Automation Controller that originates from...

Schweitzer Engineering Laboratories Real Time Automation Controller 跨站脚本漏洞

Schweitzer Engineering Laboratories Real Time Automation Controller SEL RTAC is a powerful and versatile automation platform from Schweitzer Engineering Laboratories. A security vulnerability exists in the Schweitzer Engineering Laboratories Real Time Automation Controller that originates from...

Intel Server Board 安全漏洞

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in Intel Server Board versions prior to 2.90, which stems from incorrect input validation. An attacker exploited the vulnerability to cause information disclosure...

CVE-2021-46773

Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a loss of integrity or code execution...

CVE-2021-46762

Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service...

webkitgtk: Regression of CVE-2023-28205 fixes in the Red Hat Enterprise Linux

A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with network access to pass specially crafted web content files, causing a denial of service or arbitrary code execution. This CVE exists because of...

SUSE CVE-2023-2203

A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with network access to pass specially crafted web content files, causing a denial of service or arbitrary code execution. This CVE exists because of...

The vulnerability of ODBC and OLE DB drivers in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of ODBC and OLE DB drivers in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the E-Content Manager Catalog component in the online application of Oracle iReceivables, a business automation system within the Oracle E-Business Suite. This vulnerability allows attackers to disclose protected information or create, delete, or alter access to data.

The vulnerability of the E-Content Manager Catalog component in the online application of Oracle iReceivables, a business automation system within the Oracle E-Business Suite, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to disclose...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows attackers to cause downtime or service failures.

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause the system to become unresponsive or lead to service failures...