Broadcom CA Automic Automation 输入验证错误漏洞

Broadcom CA Automic Automation is an automation product from Broadcom, Inc. It provides a service orchestration and automation platform to automate complex applications, platforms, and technology environments. A security vulnerability exists in Broadcom CA Automic Automation versions 12.2 and 12....

eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload

The plugin suffers from insufficient input validation which leads to arbitrary file upload and subsequently to remote code execution. An AJAX action accessible to unauthenticated users is affected by this issue. An allowlist of valid file extensions is defined but is not used during the validatio...

PT-2022-3040 · Microsoft · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is related to insufficient input validation in the HEVC Video Extensions codec. Exploitation of this issue may allow an attacker to execute arbitrary code...

The vulnerability of the reverse proxy server Yet Another Reverse Proxy (YARP) from Microsoft, which stems from insufficient input validation, allows attackers to induce service failures.

The vulnerability of the reverse proxy server, Yet Another Reverse Proxy YARP from Microsoft, is related to insufficient input validation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Kerberos protocol for Windows operating systems allows a perpetrator to induce a service failure.

The vulnerability of the Kerberos protocol for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Change Management sub-component of the Oracle Engineering component in the Oracle E-Business Suite allows a malicious actor to gain access to read, modify, add, or delete data.

The vulnerability of the Change Management sub-component of the Oracle Engineering component in the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to gain access to read, modify, add, or delete data through HTT...

CVE-2021-26634

Maxboard/MaxBoard (Max Yi Korea) has input validation flaws in certain parameters/variables of files, allowing SQL injection and file upload attacks. This can lead to arbitrary code execution or privilege escalation, including web-shell-based server management compromise. Some sources indicate af...

The vulnerability of the Windows operating system, related to insufficient input validation, allows a hacker to execute arbitrary code.

The vulnerability of the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Huawei CV81-WDM FW 输入验证错误漏洞

The Huawei CV81-WDM FW is a laser multifunction printer from Huawei China. The Huawei CV81-WDM FW suffers from an Insufficient Input Validation vulnerability. An attacker can exploit this vulnerability to cause a service exception...

The vulnerability of the Cisco IOX software platform, which arises due to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco IOx software platform exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted TCP traffic...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Microsoft Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the Local Security Authority Subsystem Service in the Microsoft Windows operating system is related to insufficient input validation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Microsoft Visual Studio software, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software relates to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. and V8 is an open source JavaScript engine. Google Chrome suffers from a security vulnerability that arises from insufficient validation of user-supplied input during data transmission. A remote attacker can trick a victim into visiting a specially...

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted request...

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Intel NUC 安全漏洞

The Intel NUC is a small minicomputer from Intel USA. A security vulnerability exists in the Intel NUC that stems from insufficient input validation. An authenticated attacker could exploit the vulnerability to achieve privilege escalation...

The vulnerability of the Connection Manager component of the Oracle Communications Billing and Revenue Management software allows a perpetrator to execute arbitrary code.

The vulnerability of the Connection Manager component of the Oracle Communications Billing and Revenue Management software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

PT-2022-2452 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to insufficient input validation in the Windows Graphics Component, allowing remote attackers to execute arbitrary code on the system. This can be...

PT-2022-2459

Name of the Vulnerable Software and Affected Versions Windows Address Book affected versions not specified Description The issue exists due to insufficient input validation in the Windows Address Book, allowing remote attackers to execute arbitrary code and affect the system. Recommendations At t...

PT-2022-2460 · Microsoft · Windows Network File System +1

Name of the Vulnerable Software and Affected Versions: Windows Network File System affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Network File System. It allows remote attackers to execute arbitrary code and affect the system...