MySQL InnoDB Unauthorized Access

The vulnerability of the InnoDB component in the MySQL Database Management System is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data, or to cause service failures...

PDF viewing and editing programs Code Execution

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to execute arbitrary code...

PT-2023-1195 · Oracle · Oracle Communications Convergence

Name of the Vulnerable Software and Affected Versions: Oracle Communications Convergence versions 3.0.3.1.0 Description: The issue is related to insufficient input validation in the Admin Configuration component of Oracle Communications Convergence, part of Oracle Communications Applications. Thi...

Cisco Adaptive Security Appliances SNMP DoS

The vulnerability of the implementation of the Simple Network Management Protocol SNMP for micro-programmed network interface controllers in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD exists due to insufficient validation of input data. Exploiting this...

PT-2023-13115 · Unknown · Config Manager

Name of the Vulnerable Software and Affected Versions: Config Manager affected versions not specified Description: The issue is related to a possible command injection in Config Manager due to improper input validation. This could lead to remote escalation of privilege, with user execution...

Microsoft SharePoint Server Code Execution

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrar...

Microsoft Office Graphics Code Execution

The vulnerability of the Microsoft Office Graphics component in the Microsoft 365 Apps for Enterprise suite is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

CVE-2022-45113

Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to access a specially crafted URL may allow a remote unauthenticated attacker to set a specially crafted URL to the Reset Password page and conduct a phishing attack. Affected...

OLE DB driver for SQL Server Code Execution

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Office Vulnerability Disclosure

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, Microsoft Excel, and Microsoft Office Web Apps Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to disclose sensitive information...

Microsoft Office Code Execution

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, Microsoft Excel, and Microsoft Office Web Apps Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...

SimpleEvaluationContext Class Code Execution

The vulnerability of the SimpleEvaluationContext class in the Spring Data Commons data management platform and the Spring Data REST web framework is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially...

Cisco Identity Services Engine cross-site scripting vulnerability

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users, and devices, and develops and enforces policies to monitor the network. A cross-site scripting vulnerability exists in...

MySQL Server DoS

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Oracle MySQL Shell Data Access

The vulnerability of the Shell component: The Core Client for command-line input and the Oracle MySQL Shell code editor have vulnerabilities due to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to gain read, modify, add, or delete data permissions...

PT-2022-5281

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.30 and prior Description The issue is related to insufficient input validation in the Server: Optimizer component of the MySQL Server product. This allows an attacker with network access via multiple protocols to...

Nepxion security vulnerabilities

Nepxion Discovery is an enhanced middleware for service registration discovery for Spring Cloud. Nepxion Discovery 6.16.2 and earlier versions are vulnerable to a remote code execution vulnerability that stems from a lack of validation of input data in Discovery-commons and is susceptible to SpEL...

Azure Site Recovery DoS

The vulnerability of the disaster recovery tool for Azure virtual machines exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

RPKI Validator DoS

The vulnerability of the RPKI validator OctoRPKI is related to the use of a zero value during the generation of Route Origin Authorisations. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Linux eBPF DoS

The vulnerability of the eBPF subsystem in the Linux operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures, unexpected termination of applications, or execute arbitrary code...