The vulnerability of the Unbound DNS server, related to insufficient validation of input data, allows attackers to trigger a service failure.

The vulnerability of the Unbound DNS server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Zoom, a video conferencing software, relates to insufficient validation of entered data, allowing attackers to execute arbitrary code.

The vulnerability of Zoom video conferencing software is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability in the implementation of the Internet Key Exchange (IKE) protocol in the Microsoft Windows operating system allows a hacker to induce a service failure.

The vulnerability of the Internet Key Exchange IKE protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted IKEv1 packets...

PT-2022-25731 · Sap · Sap Financial Consolidation

Name of the Vulnerable Software and Affected Versions: SAP Financial Consolidation version 1010 Description: The issue is caused by insufficient input validation, allowing an authenticated attacker with user privileges to alter the current user session. This can lead to the attacker being able to...

PT-2022-5737 · Microsoft · Odbc Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft ODBC Driver. It allows a remote attacker to execute arbitrary code, potentially impacting the system...

PT-2022-5839 · Unknown · Av1 Video Extension

Name of the Vulnerable Software and Affected Versions: AV1 Video Extension affected versions not specified Description: The issue is related to insufficient input validation in the AV1 Video Extension codec. Exploitation of this issue may allow an attacker to execute arbitrary code using a...

PT-2022-5783 · Microsoft · Sharepoint Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is related to insufficie...

PT-2022-5784 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft SharePoint Server, which can be exploited by a remote attacker to execute arbitrary code. This can...

PT-2022-5742 · Microsoft · Odbc Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft ODBC driver for the Windows operating system. This allows a remote attacker to execute arbitrary code. T...

PT-2022-5637 · Microsoft · Windows Fax Service +1

Name of the Vulnerable Software and Affected Versions: Windows Fax Service affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Fax Service, allowing an attacker to execute arbitrary code using a specially crafted file. This can enable...

PT-2022-5786 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue exists due to insufficient input validation in the Windows DNS Server component of the Windows operating system. Exploitation of this issue may allow a remote attacker ...

PT-2022-5739 · Microsoft · Odbc Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft ODBC driver for the Windows operating system. This allows a remote attacker to execute arbitrary code. T...

PT-2022-5743 · Microsoft · Odbc Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft ODBC driver for the Windows operating system. It allows a remote attacker to execute arbitrary code,...

PT-2022-4613 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 14.9 through 15.1.5 GitLab versions 15.2 through 15.2.3 GitLab versions 15.3 through 15.3.1 Description: The issue is related to insufficient input validation in GitLab, allowing a remote attacker to inject arbitrary data...

PT-2022-4615 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 15.1.6 GitLab versions 15.2 through 15.2.4 GitLab versions 15.3 through 15.3.2 Description: The issue is related to insufficient input validation in the ipynb Notebook component of GitLab, a platform for collaborative...

Ubuntu: Security Advisory (USN-19-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco FXOS Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The attacker would need to have Administrator privileges on the device. This vulnerability is due to insufficient input validation of...

PT-2022-4351

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 11.3.4 through 15.1.5 GitLab CE/EE versions 15.2 through 15.2.3 GitLab CE/EE versions 15.3 through 15.3.1 Description A vulnerability in GitLab CE/EE allows an authenticated user to achieve remote code execution via the...

The vulnerability of the Local Security Authority (LSA) service in the Windows operating system allows a perpetrator to trigger a service failure.

The vulnerability of the Local Security Authority LSA service in the Microsoft Windows operating system is related to insufficient input validation. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through a specially crafted request...

Google Chromium Intents Insufficient Input Validation Vulnerability

Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google...