4771 matches found
CVE-2018-18285
SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login interface. A successful exploit could allow an attacker to extract sensitive information from the database...
GHSA-2HHW-P8MG-JRM6 Path Traversal in http-live-simulator
Versions of http-live-simulator prior to 1.0.6 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to version 1.0.6...
The vulnerability of the PHPMailer library, related to incorrect input data validation, allows attackers to inject objects into the system.
The vulnerability of the PHPMailer library is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to inject objects into the system...
The vulnerability of kernel drivers for software automation and process control systems in TwinCAT allows a hacker to gain increased privileges.
The vulnerability of the kernel drivers of software for automation and control systems in TwinCAT exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...
EulerOS 2.0 SP2 : samba (EulerOS-SA-2019-1125)
According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - samba: Insufficient input validation in libsmbclient CVE-2018-10858 - samba: NULL pointer dereference in printer server process CVE-2018-1050 Not...
The vulnerability of the Intel Graphics Kernel Mode Driver lies in its insufficient input validation, which allows attackers to execute arbitrary code.
The vulnerability of the Intel Graphics Kernel Mode Driver is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the SetQoSSettings() function in D-Link’s microprogramming router software allows a hacker to execute arbitrary code.
The vulnerability of the SetQoSSettings function in D-Link router software relates to insufficient cleaning of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the SetIPv6FirewallSettings() function in the D-Link router’s software allows a hacker to execute arbitrary code.
The vulnerability of the SetIPv6FirewallSettings function in the D-Link router’s software interface is related to insufficient cleaning of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
EulerOS 2.0 SP3 : systemd (EulerOS-SA-2019-1107)
According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling CVE-2018-15688 - systemd: stack overflow when calling syslog from ...
The vulnerability of the TIFFWriteDirectorySec() function in the LibTIFF library, which allows a hacker to cause a service failure.
The vulnerability of the TIFFWriteDirectorySec function tifdirwrite.c in the LibTIFF library is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted file...
CVE-2018-12215
Insufficient input validation in Kernel Mode Driver in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 potentially enables a privileged user to cause a...
Integer overflow
Insufficient input validation in Kernel Mode Driver in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 potentially enables an unprivileged user to cause ...
CVE-2018-12198
Insufficient input validation in IntelR Server Platform Services HECI subsystem before version SPSE504.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access...
CVE-2018-12216
CVE-2018-12216: Insufficient input validation in Intel Graphics Driver for Windows Kernel Mode Driver could enable a privileged local user to execute arbitrary code. Affected before: 10.18.x.5059 (15.33.x.5059), 10.18.x.5057 (15.36.x.5057), 20.19.x.5063 (15.40.x.5063), 21.20.x.5064 (15.45.x.5064)...
CVE-2018-12211
Intel Graphics Driver for Windows* prior to versions 10.18.x.5059 (15.33.x.5059), 10.18.x.5057 (15.36.x.5057), 20.19.x.5063 (15.40.x.5063), 21.20.x.5064 (15.45.x.5064) and 24.20.100.6373 contains an input validation vulnerability in the User Mode Driver that potentially enables an unprivileged us...
CVE-2018-12215
Insufficient input validation in Kernel Mode Driver in IntelR Graphics Driver for Windows before versions 10.18.x.5059 aka 15.33.x.5059, 10.18.x.5057 aka 15.36.x.5057, 20.19.x.5063 aka 15.40.x.5063 21.20.x.5064 aka 15.45.x.5064 and 24.20.100.6373 potentially enables a privileged user to cause a...
CVE-2018-12221
CVE-2018-12221: Insufficient input validation in Intel Graphics Driver for Windows Kernel Mode Driver can cause an integer overflow via local access. Affected versions include 10.18.x.5059, 10.18.x.5057, 20.19.x.5063, 21.20.x.5064 and 24.20.100.6373. Intel’s advisory INTEL-SA-00189 and related ve...
The vulnerability of the IOCTL processor 0x8200E804 of the software device with hardware security keys WibuKey allows a perpetrator to exploit memory access on the kernel level.
The vulnerability of the IOCTL handler 0x8200E804 of the WibuKey.sys software driver involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to access kernel memory through a specially crafted IRP request input/output request...
LAquis SCADA Web Server Command Injection (CVE-2018-18992)
A command injection exists in LAquis SCADA web server. The vulnerability is due to insufficient input sanitization, which permits command injection. A remote attacker could exploit this vulnerability by sending a crafted request to an affected server...