MySQL Server DoS

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using network packets...

Intel Manageability Commander Privilege Escalation

The vulnerability of the Intel Manageability Commander console for connecting and utilizing Intel Active Management functions is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Web Access component of Unauthorized Access

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application exists due to insufficient verification of input data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected data using the HTTP...

Intel In-Band RCE

The vulnerability of software for managing Intel In-Band devices is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code through a specially created application...

Apache Sling security vulnerabilities

Apache Sling is an open source Web framework for the Java platform from the Apache Foundation. Designed to create content-centric applications on JSR-170-compliant content repositories such as Apache Jackrabbit, a log injection vulnerability exists in Apache Sling Commons Log version 5.4.0 and...

Microsoft SharePoint Server Code Execution

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

CVE-2022-31913

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting XSS via /odfs/classes/Master.php?f=savecategory, name...

Imagemagick Studio ImageMagick Input Validation Vulnerability

Imagemagick Studio ImageMagick is a suite of open-source image processing software from the American company Imagemagick Studio. The software can read, convert, or write images in a variety of formats. A security vulnerability exists in Imagemagick Studio ImageMagick that results in a representab...

UBUNTU-CVE-2022-20132

In lgprobe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User...

Siebel Core Component Unauthorized Access

The vulnerability of the Loging component of the Siebel Core platform’s Server Framework in the Oracle Siebel CRM system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using the HTTP...

Oracle Workflow Mailer Unauthorized Access

The vulnerability of the Mailer Workflow Notification Mailer component of the Oracle Workflow software in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

MBAMChameleon.sys DoS

The vulnerability of the MBAMChameleon.sys driver in the Malwarebytes antivirus protection software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a hacker to cause a service failure by sending specially crafted data...

E-Business Suite XDO Unauthorized Access

The vulnerability of the E-Business Suite component XDO, a reporting tool within the Oracle BI Publisher software from Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

CVE-2022-31762

The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation...

Fax Compose Form Component Code Execution

The vulnerability of the Fax Compose Form component in Windows operating systems is related to insufficient validation of entered data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2022-30719

Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash...

CVE-2022-30720

Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash...

CVE-2022-30721

Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash...

Business Logic Infra SEC Component

The vulnerability of the Business Logic Infra SEC component of the JD Edwards EnterpriseOne Tools system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to gain read access to data or cause service failures through HTTP requests...

CVE-2022-20797

A vulnerability in the web-based management interface of Cisco Secure Network Analytics, formerly Cisco Stealthwatch Enterprise, could allow an authenticated, remote attacker to execute arbitrary commands as an administrator on the underlying operating system. This vulnerability is due to...