The vulnerability of the synaTEE.signed.dll library driver for Synaptics Fingerprint Driver, a microsoftware solution for Lenovo laptops, allows a perpetrator to disclose protected information.

The vulnerability of the synaTEE.signed.dll library, which is part of the Synaptics Fingerprint Driver software for Lenovo laptops, is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

PT-2022-4254

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1 Oracle GraalVM Enterprise Edition versions 20.3.6, 21.3.2, 22.1.0 Description The issue is related to insufficient input validation in the Hotspot component of Oracle Java SE...

PT-2022-4253

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1 Oracle GraalVM Enterprise Edition versions 20.3.6, 21.3.2, 22.1.0 Description The issue is related to insufficient input validation in the Hotspot component. It allows an...

The vulnerability of the framework for developing web applications, JBoss Seam on the JBoss Enterprise Application Platform, allows attackers to execute arbitrary code.

The vulnerability of the framework for developing web applications on the JBoss Seam platform within the JBoss Enterprise Application Platform is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the kernel-level driver nvlddmkm.sys of the NVIDIA GPU Display Driver allows a attacker to cause a system failure and compromise data integrity.

The vulnerability of the kernel-level driver nvlddmkm.sys of the NVIDIA GPU Display Driver is related to insufficient input data validation. Exploiting this vulnerability can allow attackers to cause system failures and compromise data integrity...

The vulnerability of the kernel-level driver nvlddmkm.sys of the NVIDIA GPU Display Driver allows a attacker to cause a service failure.

The vulnerability of the kernel-level driver nvlddmkm.sys of the NVIDIA GPU Display Driver is related to insufficient input data validation. Exploiting this vulnerability can allow attackers to cause system failures...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server stems from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

WordPress Simple Page Transition 1.4.1 Cross Site Scripting Vulnerability

Exploit Title: WordPress Plugin ‘Simple Page Transition’ - Stored Cross Site Scripting Exploit Author: Mariam Tariq - HunterSherlock Vendor Homepage: https://wordpress.org/plugins/simple-page-transition/ Version: 1.4.1 Tested on: Firefox Contact me: email protected Vulnerable code: " / POC: 1-...

PT-2022-18866 · Hikvision · Hikvision Hybrid San/Cluster Storage

Name of the Vulnerable Software and Affected Versions: Hikvision Hybrid SAN/Cluster Storage products affected versions not specified Description: The issue is related to insufficient input validation in the web module of certain Hikvision Hybrid SAN/Cluster Storage products. This allows an attack...

The vulnerability of the OGG Core Library, a data stream management tool from Oracle GoldenGate, allows a hacker to gain full control over the application.

The vulnerability of the OGG Core Library, a data stream management tool of Oracle GoldenGate, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Wireless component of the Oracle Field Service software solution from the Oracle E-Business Suite allows a perpetrator to gain access to and modify data.

The vulnerability of the Wireless component of the Oracle Field Service software in the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to read, modify, add, or delete data...

The vulnerability of the Web Runtime component of the JD Edwards EnterpriseOne Tools system allows a hacker to modify data.

The vulnerability of the Web Runtime component of the JD Edwards EnterpriseOne Tools system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...

The vulnerability of HEVC Video Extensions relates to insufficient input data validation, allowing attackers to execute arbitrary code.

The vulnerability of HEVC Video Extensions relates to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2022-3268 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Edge. It may allow a remote attacker to execute arbitrary code with elevated privileges...

PT-2022-3269 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Edge. It may allow a remote attacker to execute arbitrary code with elevated privileges...

The vulnerability of the Reports sub-component of the Oracle Financial Services Crime and Compliance Investigation Hub component of the banking analytics system’s simulation model, allowing a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Reports sub-component of the Oracle Financial Services Crime and Compliance Investigation Hub component of the banking analytics system’s simulation model exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to modify,...

The vulnerability of the e-mail notification component of the PeopleSoft Enterprise HCM Candidate Gateway software allows a malicious individual to gain access to read, modify, add, or delete data.

The vulnerability of the email notification component of the PeopleSoft Enterprise HCM Candidate Gateway software lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to read, modify, add, or delete data through HTTP requests...

SoftGuard SNMP Network Management Extension HTML Injection / File Download Vulnerability

======================================================================= title: Multiple vulnerabilities product: SoftGuard SNMP Network Management Extension vulnerable version: SoftGuard Web SGW 5.1.5 fixed version: SoftGuard version 5.1.5 from 2022-06-01 CVE number: CVE-2022-31201, CVE-2022-3120...

PT-2022-12468 · Unknown · Nhi'S Health Insurance Web Service

Name of the Vulnerable Software and Affected Versions: NHI's health insurance web service component affected versions not specified Description: The issue is related to insufficient validation for input string length in the health insurance web service component, which can lead to a heap-based...

Multiple Cisco Small Business Products Denial of Service Vulnerabilities

Cisco Small Business is a switch from Cisco USA. A denial-of-service vulnerability exists in multiple Cisco Small Business products, which stems from insufficient user input validation of incoming HTTP packets. An unauthenticated, remote attacker could exploit the vulnerability to execute arbitra...