PT-2017-3462

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description A Remote Code Execution issue was discovered, related to insufficient input validation in the iccSelectRules.xhtml component. This allows a remote attacker to execut...

PT-2017-3444

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description A Remote Code Execution issue was discovered in HPE Intelligent Management Center iMC PLAT, related to insufficient input validation. This allows a remote attacker t...

PT-2017-3464

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description A Remote Code Execution issue was found in HPE Intelligent Management Center iMC PLAT, related to insufficient input validation in the perfSelectTask.xhtml component...

PT-2017-3443

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description A Remote Code Execution issue was discovered, related to insufficient input validation in the HPE Intelligent Management Center PLAT platform. This allows a remote...

PT-2017-3448

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center PLAT version PLAT 7.3 E0504 HPE Intelligent Management Center PLAT versions prior to 7.3 E0506 Description The issue is related to insufficient input validation in the HPE Intelligent Management Center PLAT...

PT-2017-3440

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description A Remote Code Execution issue was found in the software, related to insufficient input validation. This allows a remote attacker to execute arbitrary code. The probl...

PT-2017-3469

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description A Remote Code Execution issue was discovered, related to insufficient input validation in the operatorGroupTreeSelectContent.xhtml component. This allows a remote...

PT-2017-3441

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center PLAT version PLAT 7.3 E0504 Description The issue is related to insufficient input validation in the HPE Intelligent Management Center PLAT platform, which can be exploited by a remote attacker to execute...

PT-2017-3437

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description A Remote Code Execution issue was discovered in HPE Intelligent Management Center iMC PLAT, related to insufficient input validation. This allows a remote attacker t...

PT-2017-3445

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description The issue is related to insufficient input validation in the HPE Intelligent Management Center PLAT platform, which can be exploited by a remote attacker to execute...

CVE-2017-6759

CVE-2017-6759 affects Cisco Prime Collaboration Provisioning Tool (PCPT) 12.1 UpgradeManager. The flaw stems from insufficient input validation in the upgrade package installation functionality, allowing an authenticated, remote attacker to write arbitrary files as root on the system. Documents c...

PT-2017-17298

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Tool version 12.1 Description A vulnerability in the UpgradeManager could allow an authenticated, remote attacker to write arbitrary files as root on the system due to insufficient input validation. An...

Cisco Prime Collaboration Provisioning Tool UpgradeManager File Write Vulnerability

A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to write arbitrary files as root on the system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by...

Security Advisory - Insufficient Input Validation Vulnerability in Bastet of Huawei Smart Phone

The Bastet of some Huawei mobile phones has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot. Vulnerability ID: HWPSIRT-2017-05190 This...

PT-2017-3555

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version 7.3 E0504P04 Description: The issue exists due to insufficient input validation in the dbman service of the HPE Intelligent Management Center PLAT platform. This allows a remote attacker to execu...

PT-2017-4021

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 56 Description The issue is related to the WebExtensions module in Mozilla Firefox, which has an insufficient input validation mechanism. This allows an attacker to potentially gain unauthorized access to protected...

PT-2017-3652

Name of the Vulnerable Software and Affected Versions: Belkin N750 firmware version 1.10.22 Description: The issue is related to insufficient input validation in the twonky command.cgi component of the Belkin N750 router's firmware, allowing a remote unauthenticated user to execute commands as ro...

PT-2017-3554

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version 7.2 Description: The issue exists due to insufficient input validation in the dbman service of the HPE Intelligent Management Center PLAT platform. This allows a remote attacker to execute...

Mail.ru: [afisha.mail.ru] HTML-инъекция через XSS на портале виджета

Insufficient input validation in combination with vulnerabilities in partner's site led to XSS in the context of afisha.mail.ru domains. afisha.mail.ru is no currently covered by Bug Bounty program. Insufficient movie id validation in a widget allowed using double dots to load arbitrary content...

The vulnerability of the Microsoft Office software package, which allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite exists due to insufficient testing of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...