2080 matches found
PT-2022-3127 · Unknown · Av1 Video Extension
Name of the Vulnerable Software and Affected Versions: AV1 Video Extension affected versions not specified Description: The issue is related to insufficient input validation in the AV1 Video Extension codec. Exploitation of this issue may allow an attacker to execute arbitrary code...
PT-2022-3190 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft SharePoint Server, allowing a remote attacker to execute arbitrary code. This can be exploited by an...
The vulnerability of the `parse_url` function in the PHP programming language allows attackers to replace the displayed URL with an alternative one.
The vulnerability of the parseurl function in the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to substitute the displayed URL with another value...
CVE-2022-20783
A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient inp...
EulerOS Virtualization 2.10.0 : edk2 (EulerOS-SA-2022-1416)
According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of...
EulerOS Virtualization 2.10.1 : edk2 (EulerOS-SA-2022-1390)
According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of...
CVE-2022-20761 Cisco 1000 Series Connected Grid Router Integrated Wireless Access Point Denial of Service Vulnerability
A vulnerability in the integrated wireless access point AP packet processing of the Cisco 1000 Series Connected Grid Router CGR1K could allow an unauthenticated, adjacent attacker to cause a denial of service condition on an affected device. This vulnerability is due to insufficient input...
PT-2022-2592 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Edge. It may allow a remote attacker to elevate their privileges. Recommendations: At the moment,...
Vulnerability of the Server component: The Replication module of the MySQL database management system, which allows attackers to compromise data integrity and cause service interruptions.
The vulnerability of the Server: Replication component of the MySQL database management system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity and cause service failures...
The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain access to read data.
The vulnerability of the Core RDBMS component of the database management system Oracle Database Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain read access to data through network packets...
Cisco IOS XE Software Tool Command Language Privilege Escalation Vulnerability
A vulnerability in the Tool Command Language Tcl interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of data that is passed into the Tcl...
PT-2022-2820 · Microsoft · Yet Another Reverse Proxy
Name of the Vulnerable Software and Affected Versions: Yet Another Reverse Proxy YARP affected versions not specified Description: The issue is related to insufficient input validation in the Yet Another Reverse Proxy YARP Microsoft reverse proxy server, which can be exploited by a remote attacke...
PT-2022-2600 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the LDAP protocol in Microsoft Windows, specifically due to insufficient input validation. This can be exploited by a remote attacker to execut...
PT-2022-2706 · Microsoft · Local Security Authority Subsystem Service +1
Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description: The issue is related to insufficient input validation in the Windows Local Security Authority Subsystem Service LSASS, which can be exploite...
PT-2022-2976 · Microsoft · Hevc Video Extensions
Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is related to insufficient input validation in the HEVC Video Extensions codec. This can allow a remote attacker to execute arbitrary code. Recommendations: At the...
The vulnerability of the Samples component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to read, modify, or delete data.
The vulnerability of the Samples component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to read, modify, or delete data using the HTTP...
Vulnerability of the Server component: The MySQL Server, a database management system component, allows attackers to cause service failures and compromise data integrity.
The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions and compromise data integrity...
Vulnerability of the Server component: The MySQL Server, a database management system component, allows attackers to cause service failures and compromise data integrity.
The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions and compromise data integrity...
The vulnerability in the implementation of the ICMPv4 protocol of the Trace TCP/IP stack allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the ICMPv4 protocol implementation in the Trace TCP/IP stack is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the WebOTP API interface for Google Chrome and Microsoft Edge allows a perpetrator to execute arbitrary code.
The vulnerability of the WebOTP API interface for Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...