The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface allows a attacker to delete any files from the file system.

The vulnerability of the command-line interface CLI of Cisco IOS XE SD-WAN software exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to delete any files from the file system...

CVE-2023-20045

A vulnerability in the web-based management interface of Cisco Small Business RV160 and RV260 Series VPN Routers could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validati...

CVE-2022-20967

A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to conduct cross-site scripting attacks against other users of the application web-based management interface. This vulnerability is due to improper validation of...

CVE-2022-20964

A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system. This vulnerability is due to improper validation of user input within requests as part of the...

PT-2023-3194 · D Link · D-Link Dap-2622

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2622 affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the DDP service of the D-Link DAP-2622 wireless access point. This vulnerability can be exploited by a remote attacker to...

CVE-2022-34460

Prior Dell BIOS versions contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2022-43455

Sewio’s Real-Time Location System RTLS Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation of user input to the servicestart, servicestop, and servicerestart modules of the software. This could allow an attacker to start, stop, or restart arbitrary...

Dell iDRAC8 输入验证错误漏洞

The Dell iDRAC8 is a controller from Dell, Inc. It provides provides comprehensive, embedded management, and automation capabilities across the PowerEdge family of servers. A security vulnerability exists in Dell iDRAC8 version 2.83.83.83 and prior versions, which stems from incorrect input...

Dell iDRAC9 输入验证错误漏洞

The Dell iDRAC9 is a Dell offering that provides comprehensive, embedded management, and automation capabilities across the PowerEdge family of servers. A controller. A security vulnerability exists in Dell iDRAC9 version 6.00.02.00 and prior versions that originates from incorrect input validati...

PT-2023-1198 · Oracle · Oracle Sales For Handhelds

Name of the Vulnerable Software and Affected Versions: Oracle Sales for Handhelds versions 12.2.3 through 12.2.12 Description: The issue is related to insufficient input validation in the Pocket Outlook Sync PocketPC component of Oracle Sales for Handhelds, part of the Oracle E-Business Suite...

PT-2023-1295

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an...

PT-2023-1182 · Oracle · Oracle Mysql Cluster

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 7.4.38 and prior Oracle MySQL Cluster versions 7.5.28 and prior Oracle MySQL Cluster versions 7.6.24 and prior Oracle MySQL Cluster versions 8.0.31 and prior Description: The issue is related to insufficient inpu...

PT-2023-6831 · Oracle · Oracle Business Intelligence Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition versions 5.9.0.0.0 through 6.4.0.0.0 Description: The issue exists due to insufficient input validation in the Visual Analyzer component. This allows a remote attacker to gain read access to dat...

PT-2023-1309 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an...

PT-2023-1180 · Oracle · Oracle Learning Management +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.12 Description: The issue is related to insufficient input validation in the Setup component of the Oracle Learning Management product. This can be exploited by a remote attacker to...

PT-2023-1210 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.31 and prior Description: The issue is related to insufficient input validation in the Server: Optimizer component of MySQL Server, allowing a high-privileged attacker with network access via multiple protocols to...

The vulnerability in the implementation of the Lightweight Directory Access Protocol (LDAP) on Microsoft Windows operating systems allows a attacker to cause a service failure.

The vulnerability of the Lightweight Directory Access Protocol LDAP implementation on Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially created data...

The vulnerability of the ANGLE library in Mozilla Firefox ESR and the Thunderbird email client allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the ANGLE library in Mozilla Firefox ESR and the Thunderbird email client is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

libtiff: Invalid crop_width and/or crop_length could cause an out-of-bounds read in reverseSamples16bits()

An improper input validation flaw was found in libtiff's tiffcrop utility. This issue can lead to an out-of-bounds read and cause a crash if an attacker can supply a crafted file to tiffcrop...

Cisco RV160和RV260 输入验证错误漏洞

Cisco Small Business is a switch from Cisco USA. A security vulnerability exists in the Cisco Small Business RV160, RV260 Series VPN Routers that stems from insufficient validation of user input. An attacker could exploit the vulnerability to execute arbitrary commands...