4772 matches found
ROS-2-1596
2.1596 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...
The vulnerability of the Hyper-V hardware virtualization system of the Microsoft Windows operating system, which allows a hacker to trigger a service failure.
The vulnerability of the Hyper-V hardware virtualization technology of the Microsoft Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.
The vulnerability of Microsoft Edge and Google Chrome browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that should be protected...
Genesys Workforce Management 跨站脚本漏洞
Genesys Workforce Management is a workforce management system from Genesys, Inc. A cross-site scripting vulnerability exists in Genesys Workforce Management version 8.5.214.20, which stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit the...
Motorola Solutions Avigilon 跨站脚本漏洞
Motorola Solutions Avigilon is a series of security cameras from Motorola Solutions, U.S. A cross-site scripting vulnerability exists in Motorola Solutions Avigilon, which stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability...
CVE-2021-41836
The Fathom Analytics WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via the $siteid parameter found in the /fathom-analytics.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versio...
CVE-2021-38182
Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster...
CVE-2021-42548
The WordPress plugin Share-one-Drive is affected by a reflected Cross-Site Scripting (XSS) vulnerability due to insufficient input validation in the search function. The issue affects versions up to 1.15.2 (premium plugin) and can be exploited by unauthenticated users. The vulnerability is mitiga...
CVE-2021-42547 reflected XSS in search functionality of WP Cloud Plugins - Out-of-the-Box
Insufficient Input Validation in the search functionality of Wordpress plugin Out-of-the-Box prior to 1.20.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack...
CVE-2021-42546 Reflected XSS in search functionality of WP Cloud Plugins - Use-Your-Drive
Insufficient Input Validation in the search functionality of Wordpress plugin Use-Your-Drive prior to 1.18.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack...
Out of the Box < 1.20.3 - Reflected Cross-Site Scripting
Insufficient Input Validation in the search functionality of the plugin allows attackers to perform a reflected Cross-Site Scripting attack...
The vulnerability of embedded software developed by Qualcomm, due to insufficient testing of input data, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of microprogramming software in embedded Qualcomm devices exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
PT-2021-6933 · Mediatek · Mediatek Mt8167 +48
Name of the Vulnerable Software and Affected Versions: alac decoder versions affected versions not specified MediaTek MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779,...
CVE-2021-42122
Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 on an object’s attributes with numeric format allows an authenticated remote attacker with Object Modification privileges to insert an unexpected format, which makes the...
CVE-2021-42117
Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 allows an authenticated remote attacker with Object Modification privileges to insert arbitrary HTML without code execution...
CVE-2021-42121
Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 on an object’s date attributes allows an authenticated remote attacker with Object Modification privileges to insert an unexpected format into date fields, which leads t...
CVE-2021-42117
Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 allows an authenticated remote attacker with Object Modification privileges to insert arbitrary HTML without code execution...
CVE-2021-42122 Denial of Service via Invalid Object Attribute in TopEase
Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 on an object’s attributes with numeric format allows an authenticated remote attacker with Object Modification privileges to insert an unexpected format, which makes the...
CVE-2021-42122
CVE-2021-42122 affects Business‑DNA Solutions GmbH TopEase Platform (≤7.1.27). The root cause is insufficient input validation on an object’s attributes with numeric format. An authenticated remote attacker with Object Modification privileges can insert an unexpected format, causing the affected ...