CVE-2022-20650

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation of user supplied data that is sent to the NX-API. An attacker could exploit thi...

Zyxel Nbg6816和Zyxel Nbg6817 操作系统命令注入漏洞

The Zyxel Nbg6816 and Zyxel Nbg6817 are both products of China's Hopkins Technology Zyxel.The Zyxel Nbg6816 is a dual-band wireless gigabit router.The Zyxel Nbg6817 is a wireless router. The Zyxel Nbg6816 and Zyxel Nbg6817 have an operating system command injection vulnerability that stems from...

CVE-2021-26618

An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice. Remote attackers use this vulnerability to execute arbitrary file included malicious code...

The vulnerability of the proxyclient.asp implementation in the D-Link DI-7200G V2.E1 router microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the proxyclient.asp implementation in D-Link DI-7200G V2.E1 microprogramming software is related to insufficient cleaning of input data during the processing of parameters proxysrv, proxysrvport, proxylanip, and proxylanport. Exploiting this vulnerability allows a remote...

CVE-2022-23992

XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could potentially allow remote attackers to execute arbitrary commands with elevated privileges...

CVE-2022-23425

Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station...

CVE-2022-23432

An improper input validation in SMCSRPMBWSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution...

PT-2022-10961 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version 11 Description: The issue is related to a parcel serialization/deserialization mismatch in the writeThrowable function of AndroidFuture.java due to improper input validation. This could lead to local escalation of privilege wi...

CVE-2021-0165

Improper input validation in firmware for IntelR PROSet/Wireless Wi-Fi in multiple operating systems and KillerTM Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2021-0168

Improper input validation in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access...

Intel PROSet/Wireless WiFi和Intel Killer WiFi 输入验证错误漏洞

Intel PROSet/Wireless WiFi and Intel Killer WiFi are both wireless network card drivers from Intel Corporation USA. Intel PROSet/Wireless WiFi and Intel Killer WiFi are vulnerable to an input validation error vulnerability that stems from a potential security flaw in Intel PROSet Wireless WiFi an...

CVE-2021-22288

Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive...

The vulnerability of the jdhcpd daemon in Junos OS operating systems, which allows a hacker to cause a service failure.

The vulnerability of the jdhcpd daemon in Junos OS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

VulnCheck KEV: CVE-2019-7193

QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system...

SUSE-SU-2022:0181-1 Security update for the Linux Kernel

The SUSE MicroOS 5.0 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-4001: Fixed a race condition when the EBPF map is frozen. bsc1192990 - CVE-2021-4002: Added a missing TLB flush that could lead to leak or corruption of data in...

The vulnerability of NETGEAR CBR750, RBK852, RBR850, and RBS850 Wi-Fi routers’ microprogramming software lies in insufficient cleaning of input data, allowing attackers to execute arbitrary commands.

The vulnerability of NETGEAR’s Wi-Fi router software, including models CBR750, RBK852, RBR850, and RBS850, lies in insufficient cleaning of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of NETGEAR’s Wi-Fi router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, arises from insufficient cleaning of input data. This allows attackers to execute arbitrary commands.

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

The vulnerability of the embedded software for routers such as D7800, EX6200v2, EX6250, EX7700, EX8000, LBR20, R7800, R8900, R9000, RAX120, RBS50Y, WNR2000v5, XR450, XR500, XR700, EX6150v2, EX7300, EX7320, EX6100v2, EX6400, EX7300v2, EX6410, RBR10, RBR20, RBR40, RBR50, and EX6420 lies in insufficient cleaning of input data, allowing attackers to execute arbitrary commands.

The vulnerability of the embedded software for routers such as D7800, EX6200v2, EX6250, EX7700, EX8000, LBR20, R7800, R8900, R9000, RAX120, RBS50Y, WNR2000v5, XR450, XR500, XR700, EX6150v2, EX7300, EX7320, EX6100v2, EX6400, EX7300v2, EX6410, RBR10, RBR20, RBR40, RBR50, EX6420, RBS10, RBS20, RBS40...

CVE-2021-36343

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

WordPress plugin 跨站脚本漏洞

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in versions of the Wordpress Plugin Five Star Restaurant Reservations prior to version 2.4.8, which stems from the product's rtbwelcomesetschedule...