The vulnerability of the Oracle Text component of the Oracle Database Server database management system allows a perpetrator to execute arbitrary code.

The vulnerability of the Oracle Text component in the Oracle Database Server database management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using the Oracle Net network protocol...

CVE-2022-33752

CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code...

CVE-2022-33754

CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code...

CVE-2022-33754

CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code...

CVE-2022-33752

CA Automic Automation 12.2 and 12.3 contain a vulnerability in the Automic agent due to insufficient input validation, potentially allowing a remote attacker to execute arbitrary code. Affected products are Broadcom CA Automic Automation (Automic agent) versions 12.2/12.3. The root cause is input...

Broadcom CA Automic Automation 输入验证错误漏洞

Broadcom CA Automic Automation is an automation product from Broadcom, Inc. It provides a service orchestration and automation platform to automate complex applications, platforms, and technology environments. A security vulnerability exists in Broadcom CA Automic Automation versions 12.2 and 12....

eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload

The plugin suffers from insufficient input validation which leads to arbitrary file upload and subsequently to remote code execution. An AJAX action accessible to unauthenticated users is affected by this issue. An allowlist of valid file extensions is defined but is not used during the validatio...

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application exists due to insufficient verification of input data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information, or to modif...

CVE-2022-32285

A vulnerability has been identified in Mendix SAML Module Mendix 7 compatible All versions V1.16.6, Mendix SAML Module Mendix 8 compatible All versions V2.2.2, Mendix SAML Module Mendix 9 compatible All versions V3.2.3. The affected module is vulnerable to XML External Entity XXE attacks due to...

PT-2022-3040 · Microsoft · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is related to insufficient input validation in the HEVC Video Extensions codec. Exploitation of this issue may allow an attacker to execute arbitrary code...

Dolibarr 跨站脚本漏洞

Dolibarr is an application. A modern software package that helps manage your organization's activities.A cross-site scripting vulnerability exists in versions prior to Dolibarr 16.0, which stems from the application's lack of filtering and escaping of data parameters. An attacker could exploit th...

The vulnerability of the reverse proxy server Yet Another Reverse Proxy (YARP) from Microsoft, which stems from insufficient input validation, allows attackers to induce service failures.

The vulnerability of the reverse proxy server, Yet Another Reverse Proxy YARP from Microsoft, is related to insufficient input validation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Kerberos protocol for Windows operating systems allows a perpetrator to induce a service failure.

The vulnerability of the Kerberos protocol for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Change Management sub-component of the Oracle Engineering component in the Oracle E-Business Suite allows a malicious actor to gain access to read, modify, add, or delete data.

The vulnerability of the Change Management sub-component of the Oracle Engineering component in the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to gain access to read, modify, add, or delete data through HTT...

CVE-2021-26634

Maxboard/MaxBoard (Max Yi Korea) has input validation flaws in certain parameters/variables of files, allowing SQL injection and file upload attacks. This can lead to arbitrary code execution or privilege escalation, including web-shell-based server management compromise. Some sources indicate af...

The vulnerability of the Windows operating system, related to insufficient input validation, allows a hacker to execute arbitrary code.

The vulnerability of the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2022-3824 · Huawei · Huawei Cv81-Wdm

Name of the Vulnerable Software and Affected Versions: Huawei CV81-WDM FW affected versions not specified Description: The issue is caused by insufficient input verification, which may allow a remote attacker to cause a denial of service using a specially crafted packet. Successful exploitation o...

Huawei CV81-WDM FW 输入验证错误漏洞

The Huawei CV81-WDM FW is a laser multifunction printer from Huawei China. The Huawei CV81-WDM FW suffers from an Insufficient Input Validation vulnerability. An attacker can exploit this vulnerability to cause a service exception...

The vulnerability of the Cisco IOX software platform, which arises due to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco IOx software platform exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted TCP traffic...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Microsoft Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the Local Security Authority Subsystem Service in the Microsoft Windows operating system is related to insufficient input validation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...