PT-2023-5459 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Edge, allowing an attacker to potentially elevate their privileges. Recommendations: At the moment, there is no...

The vulnerability of the CMPapp component in CODESYS software products allows a hacker to trigger a service failure.

The vulnerability of the CMPapp component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the CmpAppForce component in CODESYS software products allows a hacker to trigger a service failure.

The vulnerability of the CmpAppForce component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the CMPapp component in CODESYS software products allows a hacker to trigger a service failure.

The vulnerability of the CMPapp component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

PT-2023-5049 · Microsoft +1 · Visual Studio +2

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visual Studio, which can allow an attacker to execute arbitrary code. This can potentially lead to remote...

PT-2023-5092 · Microsoft · Azure Devops Server

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to insufficient input validation in Azure DevOps Server, which can be exploited by a remote attacker using specially crafted data to execute arbitrary code...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain access to read, modify, or delete data.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to read, modify, or delete data...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

PT-2023-6976 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to the use of memory after it has been freed due to insufficient input validation when processing an ElementType element. This can allow an attacker to execute...

PT-2023-5233 · Ptc +1 · Thingworx Kepware Server +1

Name of the Vulnerable Software and Affected Versions: Kepware KEPServerEX versions affected versions not specified ThingWorx Kepware Server versions affected versions not specified Description: The issue is related to insufficient input validation, which can be exploited by an adversary to gain...

CVE-2023-34216

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could potentially allow malicious users to...

CVE-2023-34216 Second Order Command-injection Vulnerability in the Key-delete Function

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could potentially allow malicious users to...

Input validation

Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote attacker to execute arbitrary commands using root-level privileges. The attacker would need to have Administrator privileges on the affected device to exploit these vulnerabilities. These...

PT-2023-4522 · Cisco · Cisco Intersight Private Virtual Appliance

Name of the Vulnerable Software and Affected Versions: Cisco Intersight Private Virtual Appliance affected versions not specified Description: The issue is due to insufficient input validation when extracting uploaded software packages, allowing an authenticated, remote attacker with Administrato...

CVE-2023-39950 Insufficient input validation in efibootguard

efibootguard is a simple UEFI boot loader with support for safely switching between current and updated partition sets. Insufficient or missing validation and sanitization of input from untrustworthy bootloader environment files can cause crashes and probably also code injections into bgsetenv or...

CVE-2023-39950 Insufficient input validation in efibootguard

efibootguard is a simple UEFI boot loader with support for safely switching between current and updated partition sets. Insufficient or missing validation and sanitization of input from untrustworthy bootloader environment files can cause crashes and probably also code injections into bgsetenv or...

PT-2023-5955 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a logic error in the decideCancelProvisioningDialog function of AdminIntegratedFlowPrepareActivity.java, which can be exploited to bypass factory reset protections...

CVE-2023-20555

CVE-2023-20555 is an AMD SMM memory corruption flaw due to insufficient input validation in CpmDisplayFeatureSmm, allowing an attacker to overwrite an arbitrary bit in an attacker-controlled pointer and potentially execute code in SMM. Connected sources indicate this affects AMD processors with S...

PT-2023-5036 · Amd · Cpmdisplayfeaturesmm

Name of the Vulnerable Software and Affected Versions: AMD CpmDisplayFeatureSmm affected versions not specified Description: The issue is related to insufficient input validation in CpmDisplayFeatureSmm, which may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an...

PT-2023-4296 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Message Queuing MSMQ in Windows operating systems. This can be exploited by a remote attacker to...