The vulnerability of Intel Ethernet E810 series network adapter drivers allows a hacker to cause a service failure.

The vulnerability of Intel Ethernet E810 series network adapter drivers is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

PT-2021-2131

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 6.5 before 6.5 U3n VMware vCenter Server versions 6.7 before 6.7 U3l VMware vCenter Server versions 7.x before 7.0 U1c VMware Cloud Foundation versions 3.x before 3.10.1.2 VMware Cloud Foundation versions 4.x...

Cisco Webex Meetings Cross-Site Scripting Vulnerability (CNVD-2021-13232)

Cisco Webex Meetings provides affordable enterprise virtual meeting solutions. A cross-site scripting vulnerability exists in the web interface of Cisco Webex Meetings. The vulnerability stems from insufficient validation of user-supplied input in the web interface of the affected service. An...

CVE-2020-7849

A vulnerability of uPrism.io CURIXVideo conferecing solution could allow an unauthenticated attacker to execute arbitrary code. This vulnerability is due to insufficient inputserver domain validation. An attacker could exploit this vulnerability through crafted URL...

CVE-2020-24505

Insufficient input validation in the firmware for the IntelR 700-series of Ethernet Controllers before version 7.3 may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-12366

Insufficient input validation in some IntelR Graphics Drivers before version 27.20.100.8587 may allow a privileged user to potentially enable an escalation of privilege via local access...

Code injection

A vulnerability of uPrism.io CURIXVideo conferecing solution could allow an unauthenticated attacker to execute arbitrary code. This vulnerability is due to insufficient inputserver domain validation. An attacker could exploit this vulnerability through crafted URL...

Input validation

Insufficient input validation in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12366

Insufficient input validation in some IntelR Graphics Drivers before version 27.20.100.8587 may allow a privileged user to potentially enable an escalation of privilege via local access...

思科 Cisco Webex Meetings 跨站脚本漏洞

Cisco Webex Meetings provides affordable enterprise virtual meeting solutions. A cross-site scripting vulnerability exists in the web interface of Cisco Webex Meetings. The vulnerability stems from insufficient validation of user-supplied input in the web interface of the affected service. An...

QIWI: Remote Code Execution on contactws.contact-sys.com via SQL injection in TAktifBankObject.GetOrder in parameter DOC_ID

Summary The API interface on https://contactws.contact-sys.com:3456/ accepts a body to interact with the server's AppServ object. Because of insufficient input validation, an attacker can abuse the DOCID parameter on the TAktifBankObject operation GetOrder to inject arbitrary SQL statements into...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business models RV016, RV042, RV042G, RV082, RV320, and RV325 allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the web-based management interfaces for Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

PT-2021-2172 · Microsoft · Windows Console Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Console Driver affected versions not specified Description: The issue is related to insufficient input validation in the Windows Console Driver, which can be exploited by a remote attacker to cause a denial of service. This can affect...

Intel® Server Boards, Server Systems and Compute Modules Advisory

Summary: Potential security vulnerabilities in some Intel® Server Boards, Server Systems and Compute Modules Baseboard Management Controller BMC firmware may allow escalation of privilege or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities...

The vulnerability of the vAnalytics function in the programmatically defined Cisco SD-WAN network allows a attacker to compromise data integrity.

The vulnerability of the vAnalytics function in the programmatically defined Cisco SD-WAN network is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise data integrity from a remote location...

PT-2021-2155 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to a spoofing vulnerability in Microsoft SharePoint. It is caused by insufficient input validation, which can be exploited by a remote attacker to...

Cisco SD-WAN Information Disclosure (cisco-sa-sdwan-infodis-2-UPO232DG)

According to its self-reported version, an information disclosure vulnerability exists in the CLI of Cisco SD-WAN Software due to insufficient input validation of requests that are sent to the iperf tool. An unauthenticated, local attacker can exploit this, by sending a crafted request to the ipe...

PT-2021-2153 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to insufficient input validation in the Windows DNS Server service. This can be exploited by a remote attacker to execute arbitrary code. Recommendations: At...

PT-2021-2039 · Microsoft · Dataverse

Name of the Vulnerable Software and Affected Versions: Microsoft Dataverse affected versions not specified Description: The issue is related to insufficient input validation. It may allow a remote attacker to gain unauthorized access to protected information. Recommendations: At the moment, there...

CVE-2020-9205

There has a CSV injection vulnerability in ManageOne 8.0.1. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV files to...