MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are various chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in the MediaTek chips that stems from incorrect input validation found in ccci, which may result in out-of-bounds writes...

SolarWinds Platform 输入验证错误漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform that stems from vulnerability to improper input validation and allows a remote attacker with valid access to the...

Moodle 代码问题漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. Moodle suffers from a security vulnerability that stems from insufficient validation of user-supplied input. An attacker exploiting thi...

The vulnerability of Websoft HCM’s automation software for HR processes lies in insufficient validation of input data, allowing attackers to execute arbitrary codes.

The vulnerability of Websoft HCM’s automation software for HR processes is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Network Policy Server (NPS) server on Microsoft Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Network Policy Server NPS on Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Microsoft ODBC driver for Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft ODBC driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

FreeRDP 数字错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP by the FreeRDP team. A security vulnerability exists in FreeRDP that stems from a lack of input validation in the "urbdrc" channel...

CVE-2022-38385

IBM Cloud Pak for Security CP4S 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive information or perform unauthorized actions due to improper input validation. IBM X-Force ID: 233777...

webkitgtk: Memory corruption issue leading to arbitrary code execution

A flaw was found in webkitgtk. The vulnerability occurs due to improper input validation, leading to memory corruption. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or arbitrary code execution...

webkitgtk: Use-after-free leading to arbitrary code execution

A flaw was found in webkitgtk. Due to improper input validation, the issue occurs, leading to a use-after-free vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or arbitrary code execution...

PT-2022-25532 · Zoho · Zoho Manageengine Servicedesk Plus +1

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus MSP versions prior to 10609 Zoho ManageEngine SupportCenter Plus versions prior to 11025 Description: The issue allows users to obtain sensitive data during an export of requests from the list view, due to a...

PT-2022-21725 · Intel · Intel Nuc 11 Performance Mini Pc +1

Name of the Vulnerable Software and Affected Versions: IntelR NUC 11 Performance kits and IntelR NUC 11 Performance Mini PCs versions prior to PATGL357.0042 Description: The issue is related to improper input validation in BIOS firmware, which may allow a privileged user to potentially enable...

Intel XMM 输入验证错误漏洞

Intel XMM is a family of 4G LTE, LTE Advanced, LTE Advanced Pro and 5G modems from Intel Corporation USA. A security vulnerability exists in versions prior to Intel XMM 7560 Modem M27560R01.2146.00 that stems from incorrect validation of user input. An attacker could exploit the vulnerability to...

CVE-2022-41212

Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to read a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the...

CVE-2022-20445

In processservicesearchrsp of sdpdiscovery.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

webkitgtk: Use-after-free leading to arbitrary code execution

A flaw was found in webkitgtk. Due to improper input validation, the issue occurs, leading to a use-after-free vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or arbitrary code execution...

PT-2022-14677 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation in the getMountModeInternal function of StorageManagerService.java. This could lead to the prevention of package installation, potentially resulting in...

CandidATS 跨站脚本漏洞

CandidATS is a free and open source recruiter tracking system from CandidATS India. steal is an extensible common module loader from StealJS open source. It can load JavaScript modules defined in ES6, AMD and CommonJS formats. A security vulnerability exists in CandidATS version 3.0.0 that stems...

Splunk 代码注入漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

PT-2022-6989 · Mediatek · Mediatek Wlan

Name of the Vulnerable Software and Affected Versions: MediaTek WLAN software affected versions not specified Description: The issue is related to a possible out of bounds write in the WLAN service due to improper input validation. This could lead to local escalation of privilege, with System...