PT-2022-5499 · Microsoft · Network Policy Server +1

Name of the Vulnerable Software and Affected Versions: Network Policy Server NPS affected versions not specified Description: The issue is related to insufficient input validation in the Network Policy Server NPS of Microsoft Windows operating systems. It allows a remote attacker to cause a denia...

PT-2022-5647

Name of the Vulnerable Software and Affected Versions Microsoft 365 Apps for Enterprise versions affected versions not specified Microsoft Excel versions affected versions not specified Microsoft Office versions affected versions not specified Description The issue exists due to insufficient inpu...

PT-2022-25733 · Sap · Abap Platform +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP and ABAP Platform affected versions not specified Description: The issue is caused by insufficient input validation, allowing an attacker with high-level privileges to use a remote-enabled function to rea...

PHP 8.0.x < 8.0.25 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 7.4.x prior to 7.4.33, 8.0.x prior to 8.0.25, or 8.1.x prior to 8.1.12. It is, therefore, affected by multiple vulnerabilities: - An OOB read due to insufficient input validation in imageloadfont...

PHP 7.4.x < 7.4.33 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 7.4.x prior to 7.4.33, 8.0.x prior to 8.0.25, or 8.1.x prior to 8.1.12. It is, therefore, affected by multiple vulnerabilities: - An OOB read due to insufficient input validation in imageloadfont...

Delta Electronics DIAEnergie SQL Injection (CVE-2022-1366)

An SQL injection exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to insufficient input validation when processing requests...

Dolibarr ERP and CRM Code Injection (CVE-2022-0819)

A code injection vulnerability exists in the Dolibarr ERP/CRM package. The vulnerability is due to insufficient input validation on user provided data...

PT-2022-10495 · Cevas · Cevas

Name of the Vulnerable Software and Affected Versions: CEVAS versions prior to 1.01.46 Description: The issue concerns insufficient validation of user-controllable input, which could allow a user to bypass authentication and retrieve data using specially crafted SQL queries. Recommendations: For...

The vulnerability of the Java Protocol Buffers protobuf-java environment library, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the Java Protocol Buffers protobuf-java environment library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

PT-2023-2657

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u361, 8u361-perf, 11.0.18, 17.0.6, 20 Oracle GraalVM Enterprise Edition versions 20.3.9, 21.3.5, 22.3.1 Description The issue exists due to insufficient input validation in the Swing component of Oracle Java SE and...

PT-2022-24702 · Unknown · Rava Certificate Validation System

Name of the Vulnerable Software and Affected Versions: RAVA certificate validation system affected versions not specified Description: The issue is related to insufficient filtering for a special parameter of the web page input field in the RAVA certificate validation system. A remote attacker wi...

The vulnerability of the Google Chrome browser’s VPN extension, which allows a violator to expose protected information

The vulnerability of the Google Chrome browser’s VPN extension is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created web page...

PT-2022-5170 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.39 and prior MySQL Server versions 8.0.30 and prior Description: The issue is related to insufficient input validation in the Server: Connection Handling component of MySQL Server. This allows a high-privileged...

The vulnerability of the ParametersInterceptor class implementation in the Apache Struts software platform allows attackers to compromise the integrity of the protected information.

The vulnerability of the ParametersInterceptor class implementation in the Apache Struts software platform is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to manipulate the integrity of protected information by using a class parameter passed t...

PT-2022-5967 · Microsoft · Sharepoint Server +2

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundatio...

The vulnerability of the Unbound DNS server, related to insufficient validation of input data, allows attackers to trigger a service failure.

The vulnerability of the Unbound DNS server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability in the implementation of the Internet Key Exchange (IKE) protocol in the Microsoft Windows operating system allows a hacker to induce a service failure.

The vulnerability of the Internet Key Exchange IKE protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted IKEv1 packets...

The vulnerability of Zoom, a video conferencing software, relates to insufficient validation of entered data, allowing attackers to execute arbitrary code.

The vulnerability of Zoom video conferencing software is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2022-25731 · Sap · Sap Financial Consolidation

Name of the Vulnerable Software and Affected Versions: SAP Financial Consolidation version 1010 Description: The issue is caused by insufficient input validation, allowing an authenticated attacker with user privileges to alter the current user session. This can lead to the attacker being able to...

The vulnerability of the implementation of the DefaultActionMapper mechanism in the Apache Struts software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the DefaultActionMapper mechanism implemented by the Apache Struts software platform is related to insufficient cleaning of input data when processing parameters such as action:, redirect:, and redirectAction: prefix. Exploiting this vulnerability allows an attacker to execut...