CVE-2022-2622

Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file...

PT-2022-4339 · Microsoft · Windows Point-To-Point Protocol +1

Name of the Vulnerable Software and Affected Versions: Windows Point-to-Point Protocol PPP affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the implementation of the Point-to-Point Protocol PPP in the Windows operating system. This...

PT-2022-4274 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to the implementation of the Secure Socket Tunneling Protocol SSTP in the Windows operating system, specifically due to insufficie...

PT-2022-4171 · Microsoft · Windows Point-To-Point Protocol +1

Name of the Vulnerable Software and Affected Versions: Windows Point-to-Point Protocol PPP affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Point-to-Point Protocol PPP implementation. It allows remote attackers to execute arbitrary...

PT-2022-4235 · Microsoft · Azure Rtos Guix Studio

Name of the Vulnerable Software and Affected Versions: Azure RTOS GUIX Studio affected versions not specified Description: The issue is related to insufficient input validation in the Azure RTOS GUIX Studio development environment, which can be exploited by a remote attacker to execute arbitrary...

PT-2022-4199 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient input validation in the Azure Site Recovery VMWare to Azure emergency recovery tool, which can be exploited by a remote attacker to execute...

PT-2022-4090 · Microsoft · Windows Server +1

Name of the Vulnerable Software and Affected Versions: Windows Server affected versions not specified Description: The issue exists due to insufficient input validation in Windows Server, allowing a remote attacker to execute arbitrary code. This can affect the system, enabling the attacker to...

The vulnerability of the Web Container component of the Oracle WebLogic Server application server allows a attacker to cause a service failure.

The vulnerability of the Web Container component of the Oracle WebLogic Server application lies in insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Web Runtime component of the JD Edwards EnterpriseOne Tools system allows a hacker to disclose protected information.

The vulnerability of the Web Runtime component of the JD Edwards EnterpriseOne Tools system management resource application is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to disclose sensitive information...

PT-2022-6328 · Zoho · Zoho Manageengine Opmanager +4

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine OpManager versions prior to 2022-07-29 Zoho ManageEngine OpManager Plus versions prior to 2022-07-29 Zoho ManageEngine OpManager MSP versions prior to 2022-07-29 Zoho ManageEngine Network Configuration Manager versions prior...

CVE-2022-20913 Cisco Nexus Dashboard Arbitrary File Write Vulnerability

A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to write arbitrary files on an affected device. This vulnerability is due to insufficient input validation in the web-based management interface of Cisco Nexus Dashboard. An attacker with Administrator...

The vulnerability of Cisco IOS routers in the Cisco 1000 Series Connected Grid Routers arises from insufficient validation of input data. This allows attackers to trigger a device reboot or cause service failures.

The vulnerability of Cisco IOS routers in the Cisco 1000 Series Connected Grid Router family exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause service failure...

PT-2022-4687 · Oracle · Oracle Banking Trade Finance

Name of the Vulnerable Software and Affected Versions: Oracle Banking Trade Finance version 14.5 Description: The issue exists due to insufficient input validation in the Infrastructure component of Oracle Banking Trade Finance, allowing a remote attacker to access, modify, add, or delete data vi...

PT-2022-4252

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 17.0.3.1 Oracle GraalVM Enterprise Edition versions 21.3.2 through 22.1.0 Description The issue is related to insufficient input validation in the Libraries component of Oracle Java SE and Oracle GraalVM Enterprise...

SAP Business Objects Data Forgery Issue Vulnerability

SAP Business Objects is a business intelligence suite from SAP Germany. A security vulnerability exists in SAP Business Objects version 420 that stems from inadequate input validation. An attacker exploits the vulnerability to submit a malicious request...

Input validation

Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a malicious request through an allowed operation. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity o...

PT-2022-3962 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to insufficient input validation in the Windows Graphics Component, which can be exploited by a remote attacker to execute arbitrary code. This can...

PT-2022-3839 · Microsoft · Lync Server +1

Name of the Vulnerable Software and Affected Versions: Skype for Business Server and Microsoft Lync Server affected versions not specified Description: The issue is related to insufficient input validation, which can be exploited by a remote attacker to execute arbitrary code in the target system...

The vulnerability of the synaTEE.signed.dll library driver for Synaptics Fingerprint Driver, a microsoftware solution for Lenovo laptops, allows a perpetrator to disclose protected information.

The vulnerability of the synaTEE.signed.dll library, which is part of the Synaptics Fingerprint Driver software for Lenovo laptops, is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

PT-2022-4254

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1 Oracle GraalVM Enterprise Edition versions 20.3.6, 21.3.2, 22.1.0 Description The issue is related to insufficient input validation in the Hotspot component of Oracle Java SE...