PT-2021-4346 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Edge, which can be exploited by a remote attacker to bypass existing security restrictions...

ROS-2-1604

2.1604 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...

ROS-2-1684

2.1684 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...

ROS-2-1835

2.1835 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...

ROS-2-1903

2.1903 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...

ROS-2-1738

2.1738 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

ROS-2-1760

2.1760 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...

CVE-2021-22357

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages due to validating inputs insufficiently. Attackers can exploit this vulnerability by sending specific messages to affected module. This can cause denial of service. Affected product versions...

PT-2021-4735 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to insufficient input validation in the Adobe XMP-Toolkit-SDK, which can lead to arbitrary code execution in the context of the current user. This can be achieved b...

CVE-2021-33708

Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges...

CVE-2021-33708

Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges...

CVE-2021-33708

CVE-2021-33708 refers to Kyma, where insufficient input validation allows authenticated users to craft a custom Header to escalate privileges. The connected Red Hat, NVD, OSV, and other feeds corroborate the core issue: an input validation flaw enabling privilege escalation via authenticated requ...

VulnCheck KEV: CVE-2021-1497

Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the root user...

The vulnerability in the J-Web web interface of the Junos operating system, which allows a hacker to elevate their privileges to the root level.

The vulnerability in the J-Web web interface of the Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to the root level...

The vulnerability of the Moodle management system, related to insufficient validation of input data, allows a hacker to execute an SSRF attack.

The vulnerability of the Moodle management system is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to carry out an SSRF attack remotely...

CVE-2021-22400

Some Huawei Smartphones has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The app can modify specific parameters, causing the system to crash. Affected product include:OxfordS-AN00A...

Cisco FTD Software Command Injection (cisco-sa-fxos-cmdinj-pqZvmXCr)

According to its self-reported version, Cisco Firepower Threat Defense is affected by a vulnerability in the CLI that allows an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of commands...

PT-2021-5541 · Asterisk +2 · Asterisk +2

Name of the Vulnerable Software and Affected Versions: Asterisk versions 13.x through 13.38.2 Asterisk versions 16.x through 16.19.0 Asterisk versions 17.x through 17.9.3 Asterisk versions 18.x through 18.5.0 Certified Asterisk versions prior to 16.8-cert10 Description: The issue is related to...

PT-2021-3792 · Cisco · Cisco Intersight Virtual Appliance

Name of the Vulnerable Software and Affected Versions: Cisco Intersight Virtual Appliance affected versions not specified Description: The issue is due to insufficient input validation in the web-based management interface of Cisco Intersight Virtual Appliance, allowing an authenticated, remote...

The vulnerability of the Google Chrome browser’s URL string, related to insufficient validation of input data, allows attackers to compromise the integrity of data.

The vulnerability of the Google Chrome browser’s URL string is related to the improper implementation of Compositing. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...