MySQL Server DoS

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using MySQL network protocols...

Oracle MySQL Cluster Full Control

Vulnerability of the Cluster component: The general system for managing databases in Oracle MySQL Cluster is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain full control over the application through various network protocols...

CVE-2022-20799

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to...

CVE-2022-20099

In aee daemon, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06296442; Issue ID: ALPS06296442...

Symantec Messaging Gateway goform/formEMR30 Code Execution

The vulnerability of the goform/formEMR30 component of the Symantec Messaging Gateway exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges or execute arbitrary code...

VMware vCloud Director Code Execution

The vulnerability of the VMware vCloud Director platform for managing cloud storage repositories is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Webservices Manager Input Validation

The vulnerability of the Webservices Manager component of the Oracle Communications Billing and Revenue Management software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility o...

PT-2022-2712 · Cisco · Cisco Iox +1

Name of the Vulnerable Software and Affected Versions: Cisco IOx affected versions not specified Description: The issue exists due to insufficient input validation in the Cisco IOx platform, allowing an attacker to potentially cause a denial of service by sending specially crafted TCP traffic...

Oracle Communications Billing and Revenue Management Pipeline Manager Disclosure

The vulnerability of the Pipeline Manager component of Oracle Communications’ Billing and Revenue Management software exists due to insufficient validation of input data. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by the system...

Samples component Oracle WebLogic Server Data Compromise

The vulnerability of the Samples component of the Oracle WebLogic Server application server exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

Unified Metadata Manager Unauthorized Access

The vulnerability of the Unified Metadata Manager component of the Oracle Financial Services Analytical Applications Infrastructure software relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

Cluster Component Privilege Escalation

Vulnerability of the MySQL Cluster component: General database management system vulnerabilities in MySQL Cluster exist due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain privileged access remotely...

MySQL Server DoS Data Modification Deletion

The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or gain access to modify, add, or delete data using the MySQL network protocol...

Apache HTTP Server DoS

The vulnerability of the Apache HTTP Server is related to input validation flaws. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted data to the application...

Dell Emc Data Protection Central code-related vulnerabilities

Dell Emc Data Protection Central is a management console from Dell USA Inc. It is used for data protection. A server-side request forgery vulnerability exists in Dell EMC Data Protection Central 19.5 and prior versions, which stems from the product's failure to properly validate user input and ca...

CVE-2022-20640

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

CVE-2022-20641

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

TwinCAT OPC UA Server DoS

The vulnerability of the TwinCAT OPC UA Server and IPC Diagnostics UA Server exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Apache Log4j2 JNDI Code Execution

The vulnerability of the JNDI component of the Apache Log4j2 logging library is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

CVE-2021-36335

Dell EMC CloudLink 7.1 and all prior versions contain an Improper Input Validation Vulnerability. A remote low privileged attacker, may potentially exploit this vulnerability, leading to execution of arbitrary files on the server...