PT-2023-2639 · Oracle · Oracle Banking Payments

Name of the Vulnerable Software and Affected Versions: Oracle Banking Payments versions 14.5 through 14.7 Description: The issue is related to insufficient input validation in the Book/Internal Transfer component of Oracle Banking Payments, allowing a remote attacker to gain read, modify, add, or...

PT-2023-4573

Name of the Vulnerable Software and Affected Versions Python versions 0 through 2.7.18 Python versions 3.x through 3.11.3 Description The email module of Python incorrectly parses e-mail addresses that contain a special character, allowing attackers to bypass protection mechanisms. This can be...

PT-2023-2648 · Oracle · Oracle Health Sciences Inform

Name of the Vulnerable Software and Affected Versions: Oracle Health Sciences InForm versions prior to 6.3.1.3 Oracle Health Sciences InForm versions prior to 7.0.0.1 Description: The issue is related to insufficient input validation in the Core component of Oracle Health Sciences InForm. It allo...

PT-2023-2486 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Web Container component of Oracle WebLogic Server, allowing an unauthenticated attacker with network acces...

PT-2023-2488 · Oracle · Peoplesoft Enterprise Hcm Human Resources

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise HCM Human Resources version 9.2 Description: The issue is related to insufficient input validation in the Administer Workforce component. It allows a low-privileged attacker with network access via HTTP to compromise...

The vulnerability of Windows operating system DNS servers allows a perpetrator to execute arbitrary code.

The vulnerability of Windows operating system DNS servers is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-22614

An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard updates. An attacker can induce memory corruption in SMM by supplying malformed inputs to the BIOS Guard SMI handler...

PT-2023-2560 · Microsoft · Windows Network Load Balancing +1

Name of the Vulnerable Software and Affected Versions: Windows Network Load Balancing affected versions not specified Description: The issue is related to insufficient input validation in the Windows Network Load Balancing NLB component, allowing remote attackers to execute arbitrary code by...

PT-2023-2457 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows operating system kernel. It allows an attacker to perform a denial-of-service DoS attack. Recommendations: At the moment...

PT-2023-2432 · Microsoft +1 · Visual Studio +2

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Microsoft Visual Studio Code affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visual Studio, which can allow an attacker to...

PT-2023-2310 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Office, which can be exploited to execute arbitrary code. Recommendations: At the moment, there is no information...

PT-2023-2427 · Microsoft · Postscript/Pcl6 Class Printer Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft PostScript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to insufficient input validation in the PostScript Printer Driver Pscript and PCL6 Class Printer drivers for Windows operatin...

PT-2023-2408 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Message Queuing MSMQ for Windows operating systems. It allows a remote attacker to perform a...

PT-2023-2434 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions affected versions not specified Description: The issue is related to the implementation of the Secure Socket Tunneling Protocol SSTP in Windows operating systems, which is associated with insufficient input validation. This c...

CVE-2023-20096

A vulnerability in the web-based management interface of Cisco Unified Contact Center Express Unified CCX could allow an authenticated, remote attacker to perform a stored cross-site scripting XSS attack. This vulnerability is due to insufficient input validation of user-supplied data. An attacke...

Input validation

A vulnerability in Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary code as a root user on an affected device. This vulnerability is due to insufficient validation of user input to the web interface. An attacker could exploit this vulnerability by...

EUVD-2023-24307

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilitie...

Advisory ROSA-SA-2023-2138

Software: java-11-openjdk 11.0.18.0.10-1 OS: rosa-server79 packageevrstring: 11.0.18.0.10-1 CVE-ID: CVE-2022-21434 BDU-ID: 2022-02839 CVE-Crit: MEDIUM CVE-DESC: A vulnerability exists in the Libraries component of the Libraries component of Oracle GraalVM Enterprise Edition virtual machine due to...

PT-2023-4630 · Ibm · Ibm Watson Knowledge Catalog

Name of the Vulnerable Software and Affected Versions: IBM Watson Knowledge Catalog on Cloud Pak for Data version 4.0 Description: The issue is related to insufficient input validation in the Watson Knowledge Catalog service, which can be exploited by a remote attacker to cause a denial of servic...

Advisory ROSA-SA-2023-2136

Software: java-11-openjdk 11.0.18.0.10-1 OS: rosa-server79 packageevrstring: 11.0.18.0.10-1 CVE-ID: CVE-2022-21365 BDU-ID: 2022-02011 CVE-Crit: MEDIUM CVE-DESC: A vulnerability in the ImageIO component of the Oracle Java SE software platform and Oracle GraalVM Enterprise Edition virtual machine i...