CVE-2022-2622

Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file...

PT-2022-4339 · Microsoft · Windows Point-To-Point Protocol +1

Name of the Vulnerable Software and Affected Versions: Windows Point-to-Point Protocol PPP affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the implementation of the Point-to-Point Protocol PPP in the Windows operating system. This...

PT-2022-4171 · Microsoft · Windows Point-To-Point Protocol +1

Name of the Vulnerable Software and Affected Versions: Windows Point-to-Point Protocol PPP affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Point-to-Point Protocol PPP implementation. It allows remote attackers to execute arbitrary...

PT-2022-4274 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to the implementation of the Secure Socket Tunneling Protocol SSTP in the Windows operating system, specifically due to insufficie...

PT-2022-4235 · Microsoft · Azure Rtos Guix Studio

Name of the Vulnerable Software and Affected Versions: Azure RTOS GUIX Studio affected versions not specified Description: The issue is related to insufficient input validation in the Azure RTOS GUIX Studio development environment, which can be exploited by a remote attacker to execute arbitrary...

PT-2022-4090 · Microsoft · Windows Server +1

Name of the Vulnerable Software and Affected Versions: Windows Server affected versions not specified Description: The issue exists due to insufficient input validation in Windows Server, allowing a remote attacker to execute arbitrary code. This can affect the system, enabling the attacker to...

PT-2022-4199 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient input validation in the Azure Site Recovery VMWare to Azure emergency recovery tool, which can be exploited by a remote attacker to execute...

The vulnerability of the Web Runtime component of the JD Edwards EnterpriseOne Tools system allows a hacker to disclose protected information.

The vulnerability of the Web Runtime component of the JD Edwards EnterpriseOne Tools system management resource application is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to disclose sensitive information...

The vulnerability of the Web Container component of the Oracle WebLogic Server application server allows a attacker to cause a service failure.

The vulnerability of the Web Container component of the Oracle WebLogic Server application lies in insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

PT-2022-6328 · Zoho · Zoho Manageengine Opmanager +4

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine OpManager versions prior to 2022-07-29 Zoho ManageEngine OpManager Plus versions prior to 2022-07-29 Zoho ManageEngine OpManager MSP versions prior to 2022-07-29 Zoho ManageEngine Network Configuration Manager versions prior...

CVE-2022-20913 Cisco Nexus Dashboard Arbitrary File Write Vulnerability

A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to write arbitrary files on an affected device. This vulnerability is due to insufficient input validation in the web-based management interface of Cisco Nexus Dashboard. An attacker with Administrator...

The vulnerability of Cisco IOS routers in the Cisco 1000 Series Connected Grid Routers arises from insufficient validation of input data. This allows attackers to trigger a device reboot or cause service failures.

The vulnerability of Cisco IOS routers in the Cisco 1000 Series Connected Grid Router family exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause service failure...

PT-2022-4687 · Oracle · Oracle Banking Trade Finance

Name of the Vulnerable Software and Affected Versions: Oracle Banking Trade Finance version 14.5 Description: The issue exists due to insufficient input validation in the Infrastructure component of Oracle Banking Trade Finance, allowing a remote attacker to access, modify, add, or delete data vi...

PT-2022-4252

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 17.0.3.1 Oracle GraalVM Enterprise Edition versions 21.3.2 through 22.1.0 Description The issue is related to insufficient input validation in the Libraries component of Oracle Java SE and Oracle GraalVM Enterprise...

SAP Business Objects Data Forgery Issue Vulnerability

SAP Business Objects is a business intelligence suite from SAP Germany. A security vulnerability exists in SAP Business Objects version 420 that stems from inadequate input validation. An attacker exploits the vulnerability to submit a malicious request...

The vulnerability of the FFmpeg multimedia library in the Debian GNU/Linux operating system allows a perpetrator to trigger an octath in service or execute arbitrary code.

The vulnerability of the FFmpeg multimedia library in the Debian GNU/Linux operating system is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to trigger an octath in the service or execute arbitrary code...

Input validation

Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a malicious request through an allowed operation. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity o...

PT-2022-3962 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to insufficient input validation in the Windows Graphics Component, which can be exploited by a remote attacker to execute arbitrary code. This can...

PT-2022-3839 · Microsoft · Lync Server +1

Name of the Vulnerable Software and Affected Versions: Skype for Business Server and Microsoft Lync Server affected versions not specified Description: The issue is related to insufficient input validation, which can be exploited by a remote attacker to execute arbitrary code in the target system...

Apache Druid 跨站脚本漏洞

Apache Druid is the United States Apache Apache Foundation of a use of the Java language , written in column-oriented open source distributed database . Apache Druid suffers from a cross-site scripting vulnerability that stems from insufficient cleansing of user-supplied data. A remote attacker...