Cisco Expressway TelePresence Video Communication Server API Disclosure DoS

The vulnerability of the API interface of the microprogramming software for Cisco Expressway and the microprogramming software for the Cisco TelePresence Video Communication Server exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to...

Zyxel CLI DoS

The vulnerability of the command-line interface CLI of Zyxel network device software implementations is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Cisco Nexus Dashboard Privilege Escalation

The vulnerability of the command-line interface CLI of the Cisco Nexus Dashboard platform for analyzing and automating cloud network management exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to increase their privileges...

ALPINE-CVE-2022-2868

libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop...

CVE-2021-26639

This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system...

CVE-2022-20314

In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

CVE-2022-20314

In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

CVE-2022-20280

In MMSProvider, there is a possible read of protected data due to improper input validationSQL injection. This could lead to local information disclosure of sms/mms data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-35668

Adobe Acrobat Reader versions 22.001.20169 and earlier, 20.005.30362 and earlier and 17.012.30249 and earlier are affected by an Improper Input Validation vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...

CVE-2022-20241

In Messaging, there is a possible way to attach a private file to an SMS message due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20713

A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct browser-based attacks against users of an affected device. This vulnerability is du...

Intel NUC input validation error vulnerability

The Intel NUC is a small minicomputer from Intel USA. A security vulnerability exists in Intel NUC Laptop Kits prior to BC0076, which stems from incorrect input validation in the firmware that could allow a privileged user to potentially enable privilege escalation via physical access...

Policy Framework Component Code Execution

The vulnerability of the Policy Framework component of the Enterprise Manager Base Platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code via HTTP requests...

Windows Shell Code Execution

The vulnerability of the Windows Shell component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2022-31321

The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service DoS via a crafted input...

PT-2022-14576

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-12L Description The issue is related to improper input validation in the NotificationAccessConfirmationActivity.java file, which can be exploited to trick a victim into granting notification access t...

Cisco IOS DHCP Option 82 Reboot DoS

The vulnerability of DHCP option 82 for Cisco IOS and Cisco IOS XE operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause a service failure using a specially crafted DHCPv4 packet...

TOTOLink A800R Main Command Execution

The vulnerability of the “Main” function in the microprogramming software for the TOTOLink A800R router is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the QUERYSTRING parameter...

UBUNTU-CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

CVE-2022-20902

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly, resulting in a denial of...