2840 matches found
The vulnerability of Intel Graphics Driver drivers, related to insufficient validation of input data, allows a hacker to trigger a service failure.
The vulnerability of Intel Graphics Drivers’ drivers is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause system failures...
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business models RV016, RV042, RV042G, RV082, RV320, and RV325 allows a hacker to execute arbitrary code or cause service failures.
The vulnerability of the web-based management interfaces for Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...
The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a attacker to elevate their privileges.
The vulnerability in the vManage web interface of the Cisco SD-WAN software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...
The vulnerability of the SSH web interface of the vManage program-defined network in Cisco SD-WAN allows a intruder to gain unauthorized access to protected information.
The vulnerability of the SSH web interface of the vManage program-defined network in Cisco SD-WAN exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Vulnerability of the Server component: Security: Privileges of the MySQL Server database management system, which allows attackers to gain read access to data or obtain privileged access.
The vulnerability of the MySQL Server component lies in its lack of proper input validation. Exploiting this vulnerability allows an attacker to gain read access to data or privileged access through network packets...
CVE-2021-1347
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due t...
CVE-2021-1342
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due t...
CVE-2021-1334
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due t...
CVE-2021-1348
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due t...
CVE-2021-0364
In mobilelogd, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID:...
CVE-2021-0364
In mobilelogd, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID:...
CVE-2020-8734
Improper input validation in the firmware for IntelR Server Board M10JNP2SB before version 7.210 may allow a privileged user to potentially enable escalation of privilege via local access...
SUSE Linux Enterprise Desktop Input Validation Error Vulnerability
SUSE Linux Enterprise Desktop is an enterprise server version of the Linux desktop operating system from SUSE Germany. A security vulnerability exists in SUSE Linux Enterprise Desktop, which can be exploited by an attacker to trigger a denial of service or obtain sensitive information by forcing ...
Vulnerability of the Server component: The stored procedures of the MySQL Server database management system, which allow a hacker to cause service interruptions.
The vulnerability of the MySQL Server database management system’s stored procedures exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to deny service to the system remotely...
CVE-2020-0236
In A2DPGetCodecType of a2dpcodecconfig, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android, Versions: Android-10...
Vulnerability of the Server component: The MySQL Server database management system component, which allows a hacker to cause service interruptions.
Vulnerability of the MySQL Server component: The DDL system for database management of MySQL Server is vulnerable due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
CVE-2021-1264
A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient input validation by the Command Runner tool. An attacker could exploit this vulnerability by providing craft...
CVE-2021-1264 Cisco DNA Center Command Runner Command Injection Vulnerability
A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient input validation by the Command Runner tool. An attacker could exploit this vulnerability by providing craft...
CVE-2021-1271
A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the...
The vulnerability of the Mozilla Firefox browser, related to the lack of a mechanism for checking input data, allows attackers to carry out spear-phishing attacks.
The vulnerability of the Mozilla Firefox browser is related to a lack of mechanism for checking the input character “i”. Exploiting this vulnerability allows an attacker to perform spear-phishing attacks remotely...