PT-2021-1891

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.22 and prior Description A vulnerability in the MySQL Server product allows a highly privileged attacker with network access via multiple protocols to compromise the server. Successful attacks can result in the...

PT-2021-1789

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.22 and prior Description: The issue is related to insufficient input validation in the Server: Stored Procedure component of MySQL Server, allowing a high-privileged attacker with network access via multiple protocol...

PT-2021-1855

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.22 and prior Description A vulnerability in the MySQL Server product allows a highly privileged attacker with network access via multiple protocols to compromise the server. Successful attacks can result in the...

PT-2021-1816

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.22 and prior Description: The issue is related to insufficient input validation in the Server: Optimizer component of MySQL Server, allowing a low-privileged attacker with network access via multiple protocols to...

PT-2021-1800

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.22 and prior Description: The issue is related to insufficient input validation in the Server: Stored Procedure component of MySQL Server. It allows a high-privileged attacker with network access via multiple protoco...

PT-2021-1672

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.22 and prior Description The issue is related to insufficient input validation in the Server: DDL component of the MySQL Server product. It allows a high-privileged attacker with network access via multiple protocols ...

PT-2021-6422

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description The issue exists due to insufficient input validation in a component of Oracle WebLogic Server. This allows a remote attacker to disclose protected information and impac...

CVE-2020-24640: Undefined Security Weakness

There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3. Successful exploitation can lead to complete compromise of the underlying host operating system...

The vulnerability of the Windows operating system arises from insufficient checking of input data, allowing attackers to execute arbitrary code.

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2021-1686 · Unknown · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is due to insufficient input validation in the HEVC Video Extension codec. This can allow a remote attacker to execute arbitrary code. Recommendations: At the moment...

PT-2021-1597 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Remote Procedure Call runtime. It allows remote attackers to execute arbitrary code and affect the system. Recommendations: At t...

PT-2021-1845 · Microsoft · Sharepoint Server +5

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Microsoft Office affected versions not specified Microsoft Office Online Server affected versions not specified Microsoft Office Web Apps affected versions not specified Microsoft 365 Apps affect...

PT-2021-1678 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: A vulnerability in Microsoft Office exists due to insufficient input validation. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations: At the...

PT-2021-1602 · Microsoft · Windows Projected File System Fs Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Projected File System FS Filter Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Windows operating system. It allows attackers to obtain sensitive information and...

PT-2021-1575 · Microsoft +3 · Visual Studio +5

Name of the Vulnerable Software and Affected Versions: ASP.NET Core and Visual Studio affected versions not specified Description: The issue is related to insufficient input validation in ASP.NET Core and Visual Studio, which can lead to a denial-of-service condition. This can be exploited by a...

HCL Domino Denial of Service Vulnerability (CNVD-2020-75064)

HCL Domino is a server for collaborative client-server software platforms. A denial of service vulnerability exists in HCL Domino 10 and 11. The vulnerability stems from insufficient input validation to the public API. An attacker could exploit the vulnerability to cause the Domino server to cras...

The vulnerability of the Azure DevOps Server software lies in insufficient validation of input data, which allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure DevOps Server software lies in insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

CVE-2020-9200

There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this...

CVE-2020-9137

There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. Due to insufficient input validation, a local attacker with high privilege may execute some specially crafted scripts in the affected products. Successful...

CVE-2020-9137

There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. Due to insufficient input validation, a local attacker with high privilege may execute some specially crafted scripts in the affected products. Successful...