The vulnerability of the Microsoft Visual Studio software, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software relates to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. and V8 is an open source JavaScript engine. Google Chrome suffers from a security vulnerability that arises from insufficient validation of user-supplied input during data transmission. A remote attacker can trick a victim into visiting a specially...

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted request...

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Intel NUC 安全漏洞

The Intel NUC is a small minicomputer from Intel USA. A security vulnerability exists in the Intel NUC that stems from insufficient input validation. An authenticated attacker could exploit the vulnerability to achieve privilege escalation...

The vulnerability of the Connection Manager component of the Oracle Communications Billing and Revenue Management software allows a perpetrator to execute arbitrary code.

The vulnerability of the Connection Manager component of the Oracle Communications Billing and Revenue Management software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software for Windows operating systems allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software for Windows operating systems is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

PT-2022-2459

Name of the Vulnerable Software and Affected Versions Windows Address Book affected versions not specified Description The issue exists due to insufficient input validation in the Windows Address Book, allowing remote attackers to execute arbitrary code and affect the system. Recommendations At t...

PT-2022-2452 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to insufficient input validation in the Windows Graphics Component, allowing remote attackers to execute arbitrary code on the system. This can be...

PT-2022-2460 · Microsoft · Windows Network File System +1

Name of the Vulnerable Software and Affected Versions: Windows Network File System affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Network File System. It allows remote attackers to execute arbitrary code and affect the system...

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2022-3126 · Microsoft · Windows File History +1

Name of the Vulnerable Software and Affected Versions: Windows File History affected versions not specified Description: The issue is related to insufficient input validation in the Windows File History backup application, allowing a remote attacker to execute arbitrary code on the target system...

PT-2022-2982 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Lightweight Directory Access Protocol LDAP in the Windows operating system, specifically due to insufficient input validation. This allows ...

PT-2022-3127 · Unknown · Av1 Video Extension

Name of the Vulnerable Software and Affected Versions: AV1 Video Extension affected versions not specified Description: The issue is related to insufficient input validation in the AV1 Video Extension codec. Exploitation of this issue may allow an attacker to execute arbitrary code...

PT-2022-3190 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft SharePoint Server, allowing a remote attacker to execute arbitrary code. This can be exploited by an...

The vulnerability of the `parse_url` function in the PHP programming language allows attackers to replace the displayed URL with an alternative one.

The vulnerability of the parseurl function in the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to substitute the displayed URL with another value...

CVE-2022-20783

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient inp...

EulerOS Virtualization 2.10.0 : edk2 (EulerOS-SA-2022-1416)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of...

EulerOS Virtualization 2.10.1 : edk2 (EulerOS-SA-2022-1390)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of...

CVE-2022-20761 Cisco 1000 Series Connected Grid Router Integrated Wireless Access Point Denial of Service Vulnerability

A vulnerability in the integrated wireless access point AP packet processing of the Cisco 1000 Series Connected Grid Router CGR1K could allow an unauthenticated, adjacent attacker to cause a denial of service condition on an affected device. This vulnerability is due to insufficient input...