CVE-2019-0168

Insufficient input validation in the subsystem for IntelR CSME before versions 11.8.70, 12.0.45 and 13.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2019-0165

Insufficient Input validation in the subsystem for IntelR CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to potentially enable denial of service via local access...

PT-2019-19170

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 11.0 Description The issue arises from multiple problems in ld64 within the Xcode toolchains, which could be exploited to achieve arbitrary code execution with user privileges due to insufficient input validation during...

PT-2019-4433

Name of the Vulnerable Software and Affected Versions Intel CSME versions prior to 12.0.45 Intel CSME versions prior to 13.0.10 Description The issue is related to insufficient input validation in a subsystem, which may allow a privileged user to potentially enable escalation of privilege via loc...

PT-2019-19169

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 11.0 Description The issue arises from multiple problems in ld64 within the Xcode toolchains, which could be exploited to achieve arbitrary code execution with user privileges due to insufficient input validation during...

Security Advisory - Insufficient Input Validation Vulnerability in Huawei Share

There is an insufficient input validation vulnerability in Huawei Share. Attackers can exploit this vulnerability by sending crafted packets to the affected device. Successful exploit may cause the function will be disabled. Vulnerability ID: HWPSIRT-2019-09454 This vulnerability has been assigne...

Cisco IOS Software Software Plug and Play Agent Memory Leak(cisco-sa-20180926-pnp-memleak)

According to its self-reported version, Cisco IOS is affected by a memory leak vulnerability in the Cisco Network Plug and Play agent due to insufficient input validation. An unauthenticated, remote attacker can exploit this, by sending invalid data to the Cisco Network Plug and Play agent on an...

PT-2019-4153

Name of the Vulnerable Software and Affected Versions Windows OLE affected versions not specified Description The issue exists due to insufficient input validation in the Windows OLE component, allowing a remote attacker to execute arbitrary code. This can affect the system, enabling remote code...

PT-2019-5024

Name of the Vulnerable Software and Affected Versions Git affected versions not specified Description The issue is related to a component that handles NTFS Alternate Data Streams in the distributed version control system Git. It is caused by an insufficient input validation mechanism. Exploitatio...

PT-2019-5025

Name of the Vulnerable Software and Affected Versions Git affected versions not specified Description The vulnerability in the recursive submodule cloning component of the distributed version control system Git is related to an insufficient input validation mechanism. Exploitation of this issue m...

PT-2019-6384

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio affected versions not specified Description The issue is related to insufficient input validation in Microsoft Visual Studio, allowing a remote attacker to execute arbitrary code. Recommendations At the moment, there is...

Unspecified Vulnerability in Intel Active Management Technology (CNVD-2020-18616)

Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. Intel Active Management Technology has an unspecified vulnerability that stems from insufficient input validation. An attacker could exploit the vulnerability ...

The vulnerability of Google Chrome arises from insufficient validation of input data, allowing a hacker to replace the user’s interface in the “Extensions” tab.

The vulnerability of Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the user interface in the “Extensions” tab using a specially created HTML page...

PT-2019-4290

Name of the Vulnerable Software and Affected Versions Huawei P20 versions prior to Emily-L29C 9.1.0.311 Description The issue is related to improper file management in the Huawei Share function, allowing an attacker to trick a victim into performing certain operations during file transfer. This c...

PT-2019-4506

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus versions up to 2020 Kaspersky Internet Security versions up to 2020 Kaspersky Total Security versions up to 2020 Kaspersky Free Anti-Virus versions up to 2020 Kaspersky Small Office Security versions up to 2020 Kaspersky...

PT-2019-4505

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus versions up to 2020 Kaspersky Internet Security versions up to 2020 Kaspersky Total Security versions up to 2020 Kaspersky Free Anti-Virus versions up to 2020 Kaspersky Small Office Security versions up to 2020 Kaspersky...

PT-2019-5064

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 79.0.3945.79 Description The issue is related to incorrect security UI in sharing, allowing a remote attacker to perform domain spoofing via a crafted HTML page. It is also described as a browser vulnerability...

CVE-2019-11089

Insufficient input validation in Kernel Mode module for IntelR Graphics Driver before version 25.20.100.6519 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2019-0147

Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0147

Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...