PT-2022-4253

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1 Oracle GraalVM Enterprise Edition versions 20.3.6, 21.3.2, 22.1.0 Description The issue is related to insufficient input validation in the Hotspot component. It allows an...

The vulnerability of the framework for developing web applications, JBoss Seam on the JBoss Enterprise Application Platform, allows attackers to execute arbitrary code.

The vulnerability of the framework for developing web applications on the JBoss Seam platform within the JBoss Enterprise Application Platform is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the kernel-level driver nvlddmkm.sys of the NVIDIA GPU Display Driver allows a attacker to cause a system failure and compromise data integrity.

The vulnerability of the kernel-level driver nvlddmkm.sys of the NVIDIA GPU Display Driver is related to insufficient input data validation. Exploiting this vulnerability can allow attackers to cause system failures and compromise data integrity...

The vulnerability of the kernel-level driver nvlddmkm.sys of the NVIDIA GPU Display Driver allows a attacker to cause a service failure.

The vulnerability of the kernel-level driver nvlddmkm.sys of the NVIDIA GPU Display Driver is related to insufficient input data validation. Exploiting this vulnerability can allow attackers to cause system failures...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server stems from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

WordPress Simple Page Transition 1.4.1 Cross Site Scripting Vulnerability

Exploit Title: WordPress Plugin ‘Simple Page Transition’ - Stored Cross Site Scripting Exploit Author: Mariam Tariq - HunterSherlock Vendor Homepage: https://wordpress.org/plugins/simple-page-transition/ Version: 1.4.1 Tested on: Firefox Contact me: email protected Vulnerable code: " / POC: 1-...

PT-2022-18866 · Hikvision · Hikvision Hybrid San/Cluster Storage

Name of the Vulnerable Software and Affected Versions: Hikvision Hybrid SAN/Cluster Storage products affected versions not specified Description: The issue is related to insufficient input validation in the web module of certain Hikvision Hybrid SAN/Cluster Storage products. This allows an attack...

The vulnerability of the OGG Core Library, a data stream management tool from Oracle GoldenGate, allows a hacker to gain full control over the application.

The vulnerability of the OGG Core Library, a data stream management tool of Oracle GoldenGate, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Web Runtime component of the JD Edwards EnterpriseOne Tools system allows a hacker to modify data.

The vulnerability of the Web Runtime component of the JD Edwards EnterpriseOne Tools system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...

PT-2022-3268 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Edge. It may allow a remote attacker to execute arbitrary code with elevated privileges...

PT-2022-3269 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Edge. It may allow a remote attacker to execute arbitrary code with elevated privileges...

The vulnerability of the e-mail notification component of the PeopleSoft Enterprise HCM Candidate Gateway software allows a malicious individual to gain access to read, modify, add, or delete data.

The vulnerability of the email notification component of the PeopleSoft Enterprise HCM Candidate Gateway software lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to read, modify, add, or delete data through HTTP requests...

The vulnerability of the Reports sub-component of the Oracle Financial Services Crime and Compliance Investigation Hub component of the banking analytics system’s simulation model, allowing a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Reports sub-component of the Oracle Financial Services Crime and Compliance Investigation Hub component of the banking analytics system’s simulation model exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to modify,...

SoftGuard SNMP Network Management Extension HTML Injection / File Download Vulnerability

======================================================================= title: Multiple vulnerabilities product: SoftGuard SNMP Network Management Extension vulnerable version: SoftGuard Web SGW 5.1.5 fixed version: SoftGuard version 5.1.5 from 2022-06-01 CVE number: CVE-2022-31201, CVE-2022-3120...

Multiple Cisco Small Business Products Denial of Service Vulnerabilities

Cisco Small Business is a switch from Cisco USA. A denial-of-service vulnerability exists in multiple Cisco Small Business products, which stems from insufficient user input validation of incoming HTTP packets. An unauthenticated, remote attacker could exploit the vulnerability to execute arbitra...

The vulnerability of the Oracle Text component of the Oracle Database Server database management system allows a perpetrator to execute arbitrary code.

The vulnerability of the Oracle Text component in the Oracle Database Server database management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using the Oracle Net network protocol...

CVE-2022-33754

CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code...

CVE-2022-33752

CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code...

CVE-2022-33754

CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code...

CVE-2022-33752

CA Automic Automation 12.2 and 12.3 contain a vulnerability in the Automic agent due to insufficient input validation, potentially allowing a remote attacker to execute arbitrary code. Affected products are Broadcom CA Automic Automation (Automic agent) versions 12.2/12.3. The root cause is input...