2756 matches found
CVE-2020-0493
In CPDFSampledFunc::vCall of cpdfsampledfunc.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
Multiple D-Link Router Products Input Validation Error Vulnerability
The D-link DSR-250, among others, is a Unified Services router from China-based AUO D-link. An input validation error vulnerability exists in D-Link DSR VPN routers with firmware 3.14 and 3.17, which stems from a lack of input validation and access control, and could lead to arbitrary input being...
IBM Resilient Code Execution Vulnerability
IBM Resilient is a set of incident response platform from IBM in the United States. The platform supports functions such as incident response process orchestration and incident management. IBM Resilient suffers from a code execution vulnerability that originates as a result of formula injection d...
Jingyun Antivirus Input Validation Error Vulnerability
Jingyun Antivirus is an anti-virus, real-time protection, proactive defense anti-virus engine for personal terminal devices from China Jingyun Company. A security vulnerability exists in Jingyun Antivirus version v2.4.2.39, which originates from a failure to validate an input value from IOCtl...
Cisco Secure Web Appliance Privilege Escalation (cisco-sa-wsa-prv-esc-nPzWZrQj)
According to its self-reported version, Cisco Web Security Appliance WSA is affected by an input-validation flaw related to the log subscription subsystem that allows an authenticated, local attacker to escalate privileges to root user via command injection. TRUSTED...
Cisco Webex Meetings 跨站脚本漏洞
Cisco Webex Meetings provides affordable enterprise virtual meeting solutions. A cross-site scripting vulnerability exists in the API in Cisco Webex Meetings. The vulnerability stems from improper validation of user input provided to the application programming interface API. An attacker could...
CVE-2020-7841
Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution when the command string is begun with http://, https://, mailto://...
The vulnerability of the Mobile Service component in the Oracle BI Publisher reporting tool allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.
The vulnerability of the Mobile Service component in the Oracle BI Publisher reporting tool is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, or...
The vulnerability of the Console component of the Oracle WebLogic Server application server allows a attacker to gain full control over the application.
The vulnerability of the Console component of the Oracle WebLogic Server application lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain full control over the application using the HTTP protocol...
CVE-2020-12323
Improper input validation in the IntelR ADAS IE before version ADASIE1.0.766 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-12322
Improper input validation in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...
Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...
Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows attackers to modify, add, or delete data, or to cause service interruptions.
The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability allows an attacker to remotely modify, add, or delete data, or cause service failures using the MySQL network protocol...
Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...
The vulnerability of the Console component of the Oracle WebLogic Server application server allows a attacker to gain full control over the application.
The vulnerability of the Console component of the Oracle WebLogic Server application lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain full control over the application using the HTTP protocol...
Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...
Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...
The vulnerability of the Apache Commons Configuration library, related to insufficient validation of input data, allows attackers to execute arbitrary code.
The vulnerability of the Apache Commons Configuration library is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Hotspot component in Java SE and Java SE Embedded software allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.
The vulnerability of the Hotspot component in Java SE and Java SE Embedded software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information or to modify, add, or delete data...