Lucene search
+L

3142 matches found

BDU FSTEC
BDU FSTEC
•added 2020/06/05 12:00 a.m.•11 views

The vulnerability of the Squid proxy server arises from insufficient validation of input data, allowing attackers to access features that can only be used by reverse proxies.

The vulnerability of the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to gain access to features that can only be used by reverse proxies...

7.5CVSS6.7AI score0.03924EPSS
SaveExploits0References12Affected Software6
OpenVAS
OpenVAS
•added 2020/06/05 12:00 a.m.•64 views

Huawei Data Communication: DoS Vulnerability in Some Huawei Products (huawei-sa-20171202-01-pse)

There is a DoS vulnerability caused by memory exhaustion in some Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

4.9CVSS0.3AI score0.00218EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/06/03 12:00 a.m.•1 views

PT-2020-2792

Name of the Vulnerable Software and Affected Versions Cisco IOS versions affected versions not specified Description The issue is related to insufficient input validation in the Cisco IOx application environment, which could allow a remote attacker to elevate privileges, execute arbitrary code, o...

8.3CVSS0.00703EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2020/05/29 12:00 a.m.•14 views

The vulnerability of the drivers/spi/spi-dw.c component in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the drivers/spi/spi-dw.c component in Linux operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause system failures...

5.5CVSS6.9AI score0.00652EPSS
SaveExploits1References23Affected Software3
OpenVAS
OpenVAS
•added 2020/05/27 12:00 a.m.•44 views

Huawei Data Communication: Insufficient Input Validation Vulnerability in Some Huawei Products (huawei-sa-20171215-01-ike)

There is an insufficient input validation vulnerability in some Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

7.5CVSS7.6AI score0.01218EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/05/26 12:00 a.m.•107 views

Huawei Products DoS Vulnerability (huawei-sa-20171201-01-pse)

Multiple Huawei products are prone to a denial of service vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

5.5CVSS5.5AI score0.00218EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/05/26 12:00 a.m.•54 views

Huawei Data Communication: Out-Of-Bounds Read Vulnerability in Some Huawei Products (huawei-sa-20180131-01-sip)

Some Huawei products have an out-of-bounds read vulnerability due to insufficient input validation. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.5CVSS7.5AI score0.01218EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/22 12:00 a.m.•5 views

CVE-2020-3314: Improper Input Validation

A vulnerability in the file scan process of Cisco AMP for Endpoints Mac Connector Software could cause the scan engine to crash during the scan of local files, resulting in a restart of the AMP Connector and a denial of service DoS condition of the Cisco AMP for Endpoints service. The vulnerabili...

6.1CVSS6.2AI score0.00564EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/05/20 12:00 a.m.•3 views

PT-2020-5395

Name of the Vulnerable Software and Affected Versions Cisco Prime Network Registrar affected versions not specified Description A vulnerability in the DHCP server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The issue is due to...

7.8CVSS0.0151EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2020/05/14 12:00 a.m.•2 views

PT-2020-5469

Name of the Vulnerable Software and Affected Versions Apache Camel versions 2.22.x through 3.1.0 Description The issue is related to the Java Management Extensions JMX component of Apache Camel, which is vulnerable due to insufficient input validation. This flaw can be exploited by a remote...

7.8CVSS0.13959EPSS
SaveExploits0References35
Positive Technologies
Positive Technologies
•added 2020/05/14 12:00 a.m.•0 views

PT-2020-3858

Name of the Vulnerable Software and Affected Versions: SQLite versions prior to 3.32.0 Description: The issue is related to insufficient input validation in the alter.c and build.c components of the SQLite database management system. This can be exploited to rename arbitrary columns in a table,...

7CVSS0.0103EPSS
SaveExploits1References129
BDU FSTEC
BDU FSTEC
•added 2020/05/13 12:00 a.m.•10 views

The vulnerability of the is_wlc_event_frame function in the Broadcom brcmfmac WiFi kernel driver for the Linux operating system allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the iswlceventframe function in the Broadcom brcmfmac WiFi driver for Linux operating systems is related to insufficient input data validation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and...

8.3CVSS6.4AI score0.03286EPSS
SaveExploits0References28Affected Software15
Positive Technologies
Positive Technologies
•added 2020/05/12 12:00 a.m.•1 views

PT-2020-2458

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description A remote code execution issue exists due to the failure to properly identify and filter unsafe ASP.Net web controls. This could allow an authenticated attacker to perform...

9CVSS0.0398EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2020/05/12 12:00 a.m.•0 views

PT-2020-2341

Name of the Vulnerable Software and Affected Versions Windows Background Intelligent Transfer Service BITS affected versions not specified Description The issue is related to the improper handling of uploaded content by the Windows Background Intelligent Transfer Service BITS IIS module, which ca...

9.9CVSS0.03266EPSS
SaveExploits0References7
Check Point Advisories
Check Point Advisories
•added 2020/05/10 12:00 a.m.•123 views

Cisco Data Center Network Manager SQL Injection (CVE-2019-15984)

An SQL injection vulnerability exists in Cisco Data Center Network Manager. The vulnerability is due to insufficient input validation when processing HTTP requests in the Java class smartLicensingController...

9CVSS1.7AI score0.46935EPSS
SaveExploits10
Cvelist
Cvelist
•added 2020/04/29 8:40 p.m.•43 views

CVE-2019-16011 Cisco IOS XE SD-WAN Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to...

7.8CVSS7.7AI score0.00391EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/04/28 12:00 a.m.•0 views

PT-2021-1880

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.19 and prior Description The issue is related to insufficient input validation in the Server: Security: Privileges component of MySQL Server, allowing a high-privileged attacker with network access via multiple...

4.4CVSS0.02527EPSS
SaveExploits0References249
NVD
NVD
•added 2020/04/27 8:15 p.m.•39 views

CVE-2019-5302

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device...

5.3CVSS4.4AI score0.00323EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/27 8:15 p.m.•30 views

Input validation

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device...

2.9CVSS4.6AI score0.01369EPSS
SaveExploits0References1Affected Software47
Prion
Prion
•added 2020/04/27 8:15 p.m.•30 views

Input validation

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device...

2.9CVSS5.7AI score0.00895EPSS
SaveExploits0References1Affected Software47
Rows per page
Query Builder