PT-2017-3480

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description A Remote Code Execution issue was discovered, related to insufficient input validation in the deviceSelect.xhtml component. This allows a remote attacker to execute...

CVE-2017-6759

CVE-2017-6759 affects Cisco Prime Collaboration Provisioning Tool (PCPT) 12.1 UpgradeManager. The flaw stems from insufficient input validation in the upgrade package installation functionality, allowing an authenticated, remote attacker to write arbitrary files as root on the system. Documents c...

PT-2017-17298

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Tool version 12.1 Description A vulnerability in the UpgradeManager could allow an authenticated, remote attacker to write arbitrary files as root on the system due to insufficient input validation. An...

Cisco Prime Collaboration Provisioning Tool UpgradeManager File Write Vulnerability

A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to write arbitrary files as root on the system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by...

Security Advisory - Insufficient Input Validation Vulnerability in Bastet of Huawei Smart Phone

The Bastet of some Huawei mobile phones has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot. Vulnerability ID: HWPSIRT-2017-05190 This...

PT-2017-3555

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version 7.3 E0504P04 Description: The issue exists due to insufficient input validation in the dbman service of the HPE Intelligent Management Center PLAT platform. This allows a remote attacker to execu...

PT-2017-4021

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 56 Description The issue is related to the WebExtensions module in Mozilla Firefox, which has an insufficient input validation mechanism. This allows an attacker to potentially gain unauthorized access to protected...

PT-2017-3652

Name of the Vulnerable Software and Affected Versions: Belkin N750 firmware version 1.10.22 Description: The issue is related to insufficient input validation in the twonky command.cgi component of the Belkin N750 router's firmware, allowing a remote unauthenticated user to execute commands as ro...

PT-2017-3554

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version 7.2 Description: The issue exists due to insufficient input validation in the dbman service of the HPE Intelligent Management Center PLAT platform. This allows a remote attacker to execute...

Mail.ru: [afisha.mail.ru] HTML-инъекция через XSS на портале виджета

Insufficient input validation in combination with vulnerabilities in partner's site led to XSS in the context of afisha.mail.ru domains. afisha.mail.ru is no currently covered by Bug Bounty program. Insufficient movie id validation in a widget allowed using double dots to load arbitrary content...

PT-2017-3201

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 59.0.3071.86 for Mac, Windows, and Linux Google Chrome version prior to 59.0.3071.92 for Android Opera affected versions not specified Description The issue is related to an inappropriate implementation in Blink...

PT-2017-3203

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 59.0.3071.86 for Mac, Windows, and Linux Google Chrome version prior to 59.0.3071.92 for Android Description The issue is related to an inappropriate implementation in Blink, allowing a remote attacker to displa...

CVE-2017-7669

In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the docker feature is enabled, authenticated users can run commands as root...

SUSE SLES11 Security Update : strongswan (SUSE-SU-2017:1471-1)

This update for strongswan fixes the following issues : - CVE-2017-9022: Insufficient Input Validation in gmp Plugin leads to Denial of service bsc1039514 - CVE-2017-9023: Incorrect x509 ASN.1 parser error handling could lead to Denial of service bsc1039515 Note that Tenable Network Security has...

PT-2017-2728

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is related to insufficient input validation in the Android CAF build, potentially allowing a remote attacker to impac...

PT-2017-2722

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises due to insufficient input validation, specifically in the length of an HCI command. This could potentially all...

PT-2017-3526

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT versions 7.3 E0504P2 and earlier Description: A remote code execution issue was discovered, related to insufficient input validation in the mibFileServlet component. This allows a remote attacker to rena...

PT-2017-4139

Name of the Vulnerable Software and Affected Versions OpenEXR version 2.2.0 Description The issue is related to insufficient input validation in the bufferedReadPixels function, which could lead to an invalid write of size 1, causing the application to crash or potentially execute arbitrary code...

CVE-2017-6652

A vulnerability in the web framework of the Cisco TelePresence IX5000 Series could allow an unauthenticated, remote attacker to access arbitrary files on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using directory...

PT-2017-2132

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment for Android versions affected versions not specified Description The issue exists due to insufficient input validation in the HLOS microprogram component of the Qualcomm Secure Execution Environment for...