PT-2015-2067

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iOS versions prior to 9 WebKit, as used in Apple iTunes versions prior to 12.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and...

PT-2015-2070

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iOS versions prior to 9 WebKit, as used in Apple iTunes versions prior to 12.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and...

PT-2015-2061

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 iTunes versions prior to 12.3 Description The issue exists due to insufficient input validation in the WebKit component. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a...

PT-2015-2071

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iOS versions prior to 9 WebKit, as used in Apple iTunes versions prior to 12.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and...

PT-2015-2051

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 iTunes versions prior to 12.3 Description The issue exists due to insufficient input validation in the WebKit component. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a...

PT-2015-2078

Name of the Vulnerable Software and Affected Versions iOS versions prior to 9 Description The issue is related to insufficient input validation in the WebKit component of the iOS operating system. This can be exploited by a remote attacker to trigger certain actions by manipulating tel://,...

Security Advisory - Insufficient Input Verification Vulnerability in the FusionAccess

FusionAccess is a kind of virtual desktop applications based on Huawei cloud platform. Through the deployment of Huawei desktop cloud software on the cloud platform, customers can access the cloud desktop by the thin client device or other devices. There is an insufficient input verification...

PT-2019-5796 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.7.29 and prior Oracle MySQL Server versions 8.0.19 and prior Description: The issue is related to insufficient input validation in the Server: Parser component of Oracle MySQL Server. This allows a remote attack...

PT-2015-1759

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 40.0 Description The issue is due to insufficient input validation, allowing remote attackers to potentially execute arbitrary code or cause a denial of service, which may result in memory corruption and...

TYPO3 CMS 'editors' Cross-Site Scripting Vulnerability

TYPO3 CMS is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in TYPO3 CMS versions 6.2.0 through 6.2.13 and 7.0.0 through 7.3.0, which stems from the program's failure to adequately filter...

Cisco Nexus Devices NX-OS Software Command-Line Interpreter Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability in the command-line interpreter of Cisco Nexus devices could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with user privileges. The vulnerability exists due to insufficient input sanitization of...

PT-2015-1392

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack versions 6.1 through 6.1.11 Description The issue is related to insufficient input validation in the Tivoli Storage Manager FastBack program, allowing a remote attacker to execute arbitrary code...

PT-2015-2236

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.210 Description The issue is related to insufficient access control to files in the network operating system, allowing a local attacker to execute arbitrary OS commands by passing special parameters. This is due to...

PT-2015-1399

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack versions prior to 6.1.12 Description The issue allows remote attackers to write to and execute arbitrary files by sending crafted TCP packets to an unspecified port. This is due to insufficient input...

PT-2015-3189

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 7.0240.0 Description The issue allows local users to execute arbitrary OS commands in a privileged context via crafted CLI commands. This is due to insufficient input validation, which could enable an...

PT-2016-2330

Name of the Vulnerable Software and Affected Versions Apache Struts versions 1.1 through 1.3.10 Description The issue allows remote attackers to bypass intended access restrictions. This is due to insufficient input validation in the MultiPageValidator implementation. The exploitation can occur...

PT-2015-3336

Name of the Vulnerable Software and Affected Versions NovaBACKUP DataCenter versions prior to 09.06.03.0353 Description The issue concerns the datamover module in NovaBACKUP DataCenter for Linux, which is vulnerable to remote command execution. This is due to insufficient input validation, allowi...

PT-2015-3337

Name of the Vulnerable Software and Affected Versions NovaBACKUP DataCenter versions prior to 09.06.03.0353 Description The issue concerns the datamover module in NovaBACKUP DataCenter for Linux, which is vulnerable to remote command execution. This is due to insufficient input validation, allowi...

Lexmark Markvision Enterprise LibraryFileUploadServlet Directory Traversal (CVE-2014-9375)

A directory traversal vulnerability has been reported in Lexmark Markvision Enterprise. The vulnerability is due to insufficient input validation in LibraryFileUploadServlet when processing zip files. A remote, unauthenticated attacker could exploit this vulnerability by enticing the target user ...

GNU patch local directory traversal vulnerability

A GNU patch is a part of the GNU project that is the base patch to be installed when installing a theme package. A local directory traversal vulnerability exists in GNU patch that stems from the program failing to adequately filter user-submitted input. A local attacker could use this vulnerabili...