Cisco NX-OS Command Injection (CVE-2017-12339)

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting...

PT-2024-10001 · Moxa · Moxa Ip Cameras +1

Name of the Vulnerable Software and Affected Versions: Moxa VPort 07-3 version 1.0 Description: The issue is related to insufficient input validation in the moxa cmd service, which can be exploited to disrupt operations, potentially leading to a denial-of-service condition or service crash. If th...

Cisco NX-OS Command Injection (CVE-2017-12329)

A vulnerability in the CLI of Cisco Firepower Extensible Operating System FXOS and NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacke...

Remote Code Execution (RCE)

System.Formats.Nrbf is vulnerable to Remote Code Execution RCE. The vulnerability is due to insufficient input validation, allowing an attacker to exploit it by sending specially crafted requests or loading malicious files into a vulnerable application...

The vulnerability of the UEFI loading mode of the BIOS microprogramming system on Intel Server Board M20NTP allows a hacker to enhance their privileges.

The vulnerability of the UEFI loading mechanism in the BIOS of Intel Server Board M20NTP software-based motherboards is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Cross-Site Scripting (XSS)

unopim/unopim is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient input validation in the Create User function, allowing attackers to exploit an SVG document to steal cookies...

PT-2025-3744 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to insufficient input validation in Android operating systems. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations: At the...

webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution

A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient input validation, which attackers could exploit to execute malicious code on affected systems...

Fedora 37 : php (2022-f204e1d0ed)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-f204e1d0ed advisory. PHP version 8.1.12 27 Oct 2022 Core: Fixes segfault with Fiber on FreeBSD i386 architecture. David Carlier Fileinfo: Fixed bug GH-8805 finfo returns...

PT-2024-9041 · Microsoft · Office Word

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Word, which can be exploited by a remote attacker to bypass security features, potentially allowing them to disable...

The vulnerability of the Redis database management system, which arises due to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the Redis database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

SQL Injection

funadmin/funadmin is vulnerable to SQL injection. The vulnerability is due to insufficient input validation in the /curd/table/edit endpoint, which allows untrusted data to be directly used in SQL queries without proper sanitization or escaping...

SuiteCRM SQL注入漏洞

SuiteCRM is a customer relationship management system from the SuiteCRM team. SuiteCRM version 7.14.4 suffers from a SQL injection vulnerability that stems from insufficient input validation. An attacker exploiting this vulnerability can disclose all data in the database...

Cross-site Scripting (XSS)

baserCMS is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient input validation and output encoding in the Blog posts and Contents list feature, allows attackers to inject and execute malicious scripts within the web application...

The vulnerability of the struts2-core library in the Apache Struts software platform allows attackers to induce a service failure.

The vulnerability of the struts2-core library of the Apache Struts software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures using specially crafted XML files...

Cisco Adaptive Security Appliance SSH Remote Command Injection Vulnerability

Cisco Adaptive Security Appliance ASA is a comprehensive network security appliance developed by Cisco that provides firewall, VPN, IPS, and other security features. It supports both physical and virtual deployments and can adapt to the security needs of networks of different sizes. A remote...

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to gain access to read, modify, or delete data.

Vulnerability of the MySQL Cluster component: General database management system vulnerabilities related to MySQL Cluster are associated with insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete access to data using the MySQL...

Cisco Adaptive Security Appliance 安全漏洞

Cisco Adaptive Security Appliance ASA is a comprehensive network security appliance developed by Cisco that provides firewall, VPN, IPS, and other security features. It supports both physical and virtual deployments and can adapt to the security needs of networks of different sizes. A remote...

Mitel MiCollab Cross-Site Scripting Vulnerability (CNVD-2024-42933)

Mitel MiCollab is a mobile application from Mitel Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees. A cross-site scripting vulnerability exists in Mitel MiCollab version 9.7.1.110 and prior versions, which stems from insufficient validation of...

CVE-2024-41713

A vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab through 9.8 SP1 FP2 9.8.1.201 could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the...