CVE-2021-42122

CVE-2021-42122 affects Business‑DNA Solutions GmbH TopEase Platform (≤7.1.27). The root cause is insufficient input validation on an object’s attributes with numeric format. An authenticated remote attacker with Object Modification privileges can insert an unexpected format, causing the affected ...

CVE-2021-42120

CVE-2021-42120 affects Business-DNA Solutions GmbH TopEase Platform (Version

CVE-2021-42120 Missing Character Length (Denial of Service) in TopEase

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 on all object attributes allows an authenticated remote attacker with Object Modification privileges to insert arbitrarily long strings, eventually leading to exhaustion...

CVE-2021-42121

CVE-2021-42121 describes an insufficient input validation vulnerability in Business-DNA Solutions GmbH TopEase Platform (

CVE-2021-42121 Denial of Service via Invalid Date Format in TopEase

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 on an object’s date attributes allows an authenticated remote attacker with Object Modification privileges to insert an unexpected format into date fields, which leads t...

CVE-2021-42117

CVE-2021-42117 affects Business-DNA Solutions GmbH TopEase Platform (Web Applications)

CVE-2021-42117 UI Redressing in TopEase

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 allows an authenticated remote attacker with Object Modification privileges to insert arbitrary HTML without code execution...

CVE-2021-26325

Insufficient input validation in the SNPGUESTREQUEST command may lead to a potential data abort error and a denial of service...

PT-2021-6990 · Oracle +1 · Oracle Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 8.0.28 and prior Description: The issue is related to insufficient input validation in the Oracle MySQL Cluster component. It may allow an attacker to gain full control over the application using various network...

The vulnerability of the embedded web-server microprogramming software for Hikvision cameras allows a intruder to execute arbitrary commands.

The vulnerability of Hikvision’s embedded web-server-based IP camera software relates to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

PT-2021-7000 · Oracle +2 · Virtualbox +2

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.34 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, which can be exploited by a low-privileged attacker with logon access to the...

The vulnerability of Microsoft Exchange Server’s mail server, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of Microsoft Exchange Server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

PT-2021-5271 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Windows operating system. It allows a remote attacker to cause a denial of service. Recommendations: At the moment, there is no...

PT-2021-5160 · Microsoft · Azure Rtos

Name of the Vulnerable Software and Affected Versions: Azure RTOS affected versions not specified Description: The issue exists due to insufficient input validation in the Azure RTOS operating system. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations: A...

Cisco Email Security Appliance Denial of Service Vulnerability

The Cisco Email Security Appliance ESA is an email security appliance from Cisco USA. A denial of service vulnerability exists in the Cisco Email Security Appliance, which is caused by insufficient validation of incoming email input. An attacker could exploit this vulnerability to perform a denia...

CVE-2021-34741

A vulnerability in the email scanning algorithm of Cisco AsyncOS software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to perform a denial of service DoS attack against an affected device. This vulnerability is due to insufficient input validation of...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9534)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9534 advisory. - Bluetooth: hciuart: check for missing tty operations Vladis Dronov Orabug: 30244627 CVE-2019-10207 CVE-2019-10207 - Bluetooth: hciuart: Add basic...

Cisco IOS XE Software SD WAN Command Injection (cisco-sa-sd-wan-rhpbE34A)

A command injection vulnerability exists in the CLI of Cisco IOS XE SD-WAN Software due to insufficient input validation by the system CLI. An authenticated, local attacker can exploit this, by submitting crafted input to the system CLI, to execute arbitrary commands with root privileges. Note th...

CVE-2021-39357 Leaky Paywall <= 4.16.5 Authenticated Stored Cross-Site Scripting

The Leaky Paywall WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via the /class.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 4.16.5. This affec...

Security Advisory - CSV Injection Vulnerability in Some Huawei Products

There is a CSV injection vulnerability in some Huawei Products. An attacker with high privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV files ...