CVE-2020-3591

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not...

CVE-2020-24432

Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier and Adobe Acrobat Pro DC 2017.011.30175 and earlier are affected by an improper input validation vulnerability that could result in arbitrary JavaScript execution in the context of the...

The vulnerability of the Oracle Applications Manager component, a tool for application management in the Oracle E-Business Suite, allows an attacker to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Oracle Applications Manager component, a tool for application management in the Oracle E-Business Suite, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or to...

bootstrap: XSS in the affix configuration target property

A flaw was found in Bootstrap, where it is vulnerable to Cross-site scripting caused by improper validation of user-supplied input by the affix configuration target property. This flaw allows a remote attacker to execute a script in a victim's Web browser within the security context of the hostin...

CVE-2020-27159

Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices prior to 5.04.114...

The vulnerability of the srxpfe process in Junos operating system routers of the NFX150, NFX250, SRX1500, SRX4100, SRX4200, and vSRX series allows a attacker to cause service interruptions.

The vulnerability of the srxpfe process in Junos operating system routers of the NFX150, NFX250, SRX1500, SRX4100, SRX4200, and vSRX series is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

PT-2020-4716 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to insufficient validation of user-supplied input by the web-based management interface, which could allow an unauthenticated,...

PT-2020-4505

Name of the Vulnerable Software and Affected Versions Java SE versions 7u271, 8u261, 11.0.8, and 15 Java SE Embedded version 8u261 Description The issue is related to insufficient input validation in the Libraries component of Java SE and Java SE Embedded. It allows an unauthenticated attacker wi...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2020-64000)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS has a security vulnerability that can be exploited by an attacker to run code via the DHCPv6 relay agent usage...

VulnCheck KEV: CVE-2020-1040

Microsoft Hyper-V RemoteFX vGPU contains an improper input validation vulnerability due to the host server failing to properly validate input from an authenticated user on a guest operating system. Successful exploitation allows for remote code execution on the host operating system...

PT-2020-4501

Name of the Vulnerable Software and Affected Versions Java SE versions 7u271, 8u261, 11.0.8, and 15 Java SE Embedded version 8u261 Description The issue is related to insufficient input validation in the JNDI component of Java SE and Java SE Embedded. It allows an unauthenticated attacker with...

Huawei Mate 30 (5G) Taurus-AN00B Buffer Overflow Vulnerability

Huawei Mate 305G Taurus-AN00B is the official firmware for Huawei Mate 305G. A buffer overflow vulnerability exists in versions prior to Huawei Taurus-AN00B 10.1.0.156 C00E155R7P2. The vulnerability stems from a function in the module that does not adequately validate input. An attacker could use...

SprecherAutomation Sprecher SPRECON-E Command Injection Vulnerability

SprecherAutomation Sprecher SPRECON-E is a service package application from the Austrian company SprecherAutomation that provides operational consulting, planning, development, engineering and on-site installation of equipment, commissioning and operator training. A security vulnerability exists ...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of Remote Desktop Services RDS for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions through a specially created application...

HUAWEI Mate 20 JavaScript Injection Vulnerability

Huawei Mate 20 is a smartphone from Chinese company Huawei Huawei. An injection vulnerability exists in previous versions of Huawei HUAWEI Mate 20 10.1.0.163 C00E160R3P8, which stems from a module that does not perform input checksums on specific inputs. An attacker can exploit this vulnerability...

CVE-2020-24551

IProom MMC+ Server login page does not validate specific parameters properly. Attackers can use the vulnerability to redirect to any malicious site and steal the victim's login credentials...

The vulnerability of the Cisco IOS XE operating system, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco IOS XE operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2020-3601

A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privileges on an affected device. The vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this...

CVE-2020-3320

A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficien...

CVE-2020-3536

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly...