NETGEAR JGS516PE Cross-Site Scripting Vulnerability

The NETGEAR JGS516PE is a switch from NETGEAR. A cross-site scripting vulnerability exists in the NETGEAR JGS516PE prior to version 2.6.0.43. The vulnerability stems from a WEB application that lacks proper validation of client data. An attacker can exploit the vulnerability to execute client-sid...

CVE-2020-3162

A vulnerability in the Constrained Application Protocol CoAP implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of incoming Co...

Oracle VM VirtualBox (Apr 2020 CPU)

The version of Oracle VM VirtualBox running on the remote host is 5.2.x prior to 5.2.40, 6.0.x prior to 6.0.20 or 6.1.x prior to 6.1.6. It is, therefore, affected by multiple vulnerabilities as noted in the April 2019 Critical Patch Update advisory. Note that Nessus has not tested for this issue...

PT-2020-2599

Name of the Vulnerable Software and Affected Versions Java SE versions 11.0.6 and 14 Description The issue is related to insufficient input validation in the JSSE component of Oracle Java SE. It allows an unauthenticated attacker with network access via HTTPS to compromise Java SE, resulting in...

The vulnerability in the arch/powerpc/kernel/process.c component of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability in the arch/powerpc/kernel/process.c component of the Linux operating system’s kernel PowerPC microprocessor architecture exists due to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility ...

Vastgota-Data ProVide Injection Vulnerability

Vastgota-Data ProVide is a file transfer server with a graphical user interface from Vastgota-Data, Sweden. An injection vulnerability exists in /ajax/GetInheritedProperties in Vastgota-Data ProVide 13.1 and earlier versions. The vulnerability arises from a lack of proper validation of user input...

Arbitrary Code Execution

samba is vulnerable to arbitrary code execution. The vulnerability exist as an input validation flaw was found in the way Samba handled Any Batched AndX requests. A remote, unauthenticated attacker could send a specially-crafted SMB packet to the Samba server, possibly resulting in arbitrary code...

Denial Of Service (DoS)

squid is vulnerable to denial of service. An input validation flaw was found in the way Squid calculated the total number of resource records in the answer section of multiple name server responses. An attacker could use this flaw to cause Squid to crash...

Arbitrary Code Execution

netpbm is vulnerable to arbitrary code execution. The vulnerability exists as an input validation flaw and multiple integer overflows were discovered in the JasPer library providing support for JPEG-2000 image format and used in the jpeg2ktopam and pamtojpeg2k converters. An attacker could create...

xdLocalStorage input validation error vulnerability (CNVD-2020-28469)

xdLocalStorage is a lightweight JavaScript library that supports cross-domain data storage . An input validation error vulnerability exists in xdLocalStorage, which stems from a function that does not perform any validation on the origin of a Web message. An attacker can exploit this vulnerabilit...

CloudBees Jenkins AWSEB Deployment Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site scripting...

CVE-2016-5386

An input-validation flaw was discovered in the Go programming language built in CGI implementation, which set the environment variable "HTTPPROXY" using the incoming "Proxy" HTTP-request header. The environment variable "HTTPPROXY" is used by numerous web clients, including Go's net/http package,...

IBM Spectrum Protect Plus Command Execution Vulnerability (CNVD-2020-20699)

IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. A security vulnerability exists in IBM...

Perun Injection Vulnerability

Perun is an authentication and access management system. An injection vulnerability exists in versions prior to Perun 3.9.1. The vulnerability arises from a lack of proper validation of user input data by a network system or product during the course of a user's operation to enter a constructed...

CVE-2020-5555

Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write data of the files placed in the same directory where it is placed via unspecified vector due to the improper input validation issue...

The vulnerability of the programmatically defined Cisco SD-WAN network, which arises due to insufficient validation of input data, allows a hacker to elevate their privileges to the root level.

The vulnerability of the programmatically defined Cisco SD-WAN network exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

yargs-parser input validation error vulnerability

yargs-parser is an option parser. An input validation error vulnerability exists in yargs-parser versions prior to 13.1.2, 14.0.0 and later fixed in 15.0.1, and 16.0.0 and later fixed in 18.1.1, which can be exploited to add or modify an Object.prototype property with the help of the 'proto'...

Chadha Software Technologies PHPKB Standard Multi-Language Cross-Site Scripting Vulnerability (CNVD-2020-17950)

Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A cross-site scripting vulnerability exists in the way URIs are handled in the admin/header.php file in Chadha PHPKB Standard...

CVE-2020-0567

Improper input validation in IntelR Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to enable denial of service via local access...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data, allowing a malicious actor to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or WRF file...