2840 matches found
The vulnerability of the device performance information collection application HP Touchpoint Analytics, due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.
The vulnerability of the HP Touchpoint Analytics performance monitoring application relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using malicious DLL files...
Microsoft Hyper-V Denial of Service Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A security vulnerability exists in Microsoft Windows and Windows Server. The vulnerability...
Microsoft .NET Framework Remote Code Execution Vulnerability (CNVD-2020-03547)
Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a development platform. The platform includes the C and Visual Basic programming languages, a public language runtime library, and an extensive class library. A remote code execution...
WordPress flog cross-site scripting vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress flog version 0.1. The vulnerability stems from a lack...
The vulnerability of the FreeBSD operating systems arises from insufficient validation of input data, allowing attackers to overwrite memory on the bhyve host or execute arbitrary code under the control of the root user.
The vulnerability of the FreeBSD operating systems exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to remotely rewrite memory on the bhyve host or execute arbitrary code under the identity of the root user...
The vulnerability of Huawei routers stems from insufficient validation of input data. This allows attackers to gain access to arbitrary files and upload those files onto vulnerable devices.
The vulnerability of Huawei routers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to gain access to arbitrary files and upload those files to the vulnerable device...
CVE-2019-11088
Insufficient input validation in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2019-11100
Insufficient input validation in the subsystem for IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via physical access...
The vulnerability of the fds_sys_passDebugPasswd_ret() function in the libfds.so library of the Zyxel GS1900 series router microprogramming software allows a attacker to escalate their privileges.
The vulnerability of the fdssyspassDebugPasswdret function in the libfds.so library of the Zyxel GS1900 series router microprogramming software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
The vulnerability of the i40e controller drivers for Intel Ethernet Series 700 models allows a hacker to cause a service failure.
The vulnerability of Intel Ethernet Series 700 controller drivers i40e exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of 3D graphics functions in VMware ESXi, VMware Workstation, and VMware Fusion allows a hacker to trigger a service failure.
The vulnerability of 3D graphics functions in VMware ESXi, VMware Workstation, and VMware Fusion relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the i40e controller drivers for Intel Ethernet Series 700 models allows a hacker to cause a service failure.
The vulnerability of Intel Ethernet Series 700 controller drivers i40e exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the REST API interface of the Cisco Prime Infrastructure monitoring and network equipment management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a perpetrator to escalate their privileges and execute arbitrary code.
The vulnerability of the REST API interface of the Cisco Prime Infrastructure monitoring and network equipment management system, as well as the Cisco Evolved Programmable Network Manager EPNM software for managing network services, is related to insufficient validation of input data. Exploiting...
The vulnerability of the Cisco Wireless LAN Controller web interface allows a perpetrator to trigger a service failure.
The vulnerability of the Cisco Wireless LAN Controller web interface is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
CVE-2019-2231
In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID...
CVE-2019-7193
This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions...
The vulnerability of Google Chrome’s Blink rendering module allows a hacker to bypass the configured content filters and compromise the integrity of the protected information.
The vulnerability of Google Chrome’s Blink rendering module exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the configured content filters and compromise the integrity of the protected information through a specially created HT...
The vulnerability of the ReadDCMImage function (coders/dcm.c) and the ReadPICTImage function (coders/pict.c) in the console-based graphic editor ImageMagick allows a hacker to cause a service failure.
The vulnerability of the ReadDCMImage function coders/dcm.c and ReadPICTImage function coders/pict.c in the console-based graphic editor ImageMagick exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service...
The vulnerability of Google Chrome arises from insufficient validation of input data, allowing a hacker to conceal a notification indicating a transition to full-screen mode.
The vulnerability of Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to conceal a notification indicating that the system has switched to full-screen mode using a specially created HTML page...
