3142 matches found
PT-2017-1621
Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue is related to insufficient input validation in the Hyper-V virtualization system of the Windows operating system. An attacker could exploit this to cause a denial of service...
PT-2017-16142
Name of the Vulnerable Software and Affected Versions Cisco Workload Automation Client Manager Server versions 6.3.0.116 and later Cisco Tidal Enterprise Scheduler Client Manager Server versions 6.2.1.435 and later Description The issue is caused by insufficient input validation, allowing an...
PT-2017-1465
Name of the Vulnerable Software and Affected Versions Microsoft Edge versions affected versions not specified Microsoft Internet Explorer versions affected versions not specified Description The issue exists due to insufficient input validation in Microsoft browsers, allowing a remote attacker to...
PT-2017-1622
Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue is related to insufficient input validation in the Hyper-V virtualization system of the Windows operating system. It can be exploited by an attacker using a specially crafte...
PT-2017-1655
Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold, 1511, 1607 Microsoft Windows Server 2016 Description The issue allows remote attackers to modify PowerShell script without invalidating associated signatures. It exists due to insufficient input validation,...
PT-2017-1939
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue exists due to insufficient input validation in the SMBv1 protocol of the Microsoft Windows operating system. It allows a remote attacker to execute arbitrary code using...
PT-2017-4211
Name of the Vulnerable Software and Affected Versions PostGIS versions 2.x through 2.3.2 Description The issue is related to the ST AsX3D function in PostGIS, which is used with PostgreSQL. It allows remote attackers to cause a denial of service via crafted input, as demonstrated by an abnormal...
PT-2017-3961
Name of the Vulnerable Software and Affected Versions GNU C Library glibc versions 2.31 and earlier Description The issue is related to the iconv program in the GNU C Library. When invoked with multiple suffixes in the destination encoding along with the -c option, it enters an infinite loop when...
PT-2017-1141
Name of the Vulnerable Software and Affected Versions Java SE versions 6u131, 7u121, and 8u112 Java SE Embedded version 8u111 JRockit version R28.3.12 Description The issue exists due to insufficient input validation in the Java SE, Java SE Embedded, and JRockit components. It can be exploited by...
PT-2017-1140
Name of the Vulnerable Software and Affected Versions Java SE versions 6u131, 7u121, and 8u112 Java SE Embedded version 8u111 JRockit version R28.3.12 Description The issue is related to insufficient input validation in the 2D component of the Java Platform. It allows an unauthenticated attacker...
PT-2017-1139
Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.7.16 and earlier Description The issue is related to insufficient input validation in the Server: Replication component of MySQL. It allows an attacker with network access via multiple protocols to compromise the MySQL...
PT-2017-3539
Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version 7.3 E0504P04 Description: The issue is related to insufficient input validation in the dbman service of the HPE Intelligent Management Center PLAT platform. This can be exploited by a remote...
PT-2016-3151
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.23 Description The issue is caused by insufficient input validation in the mod auth digest module of the Apache HTTP Server. This can be exploited by a remote attacker to cause the server to crash...
PT-2016-3026
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 55.0.2883.75 for Mac, Windows and Linux Google Chrome version prior to 55.0.2883.84 for Android Description The issue arises from the extensions API in Google Chrome incorrectly handling navigation within PDFs...
PT-2016-2968 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is due to insufficient input validation in Microsoft Edge, allowing a remote attacker to potentially tamper with web page content using a specially crafted website...
PT-2016-3153
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 53.0.2785.143 Opera affected versions not specified Description The issue is related to multiple unspecified vulnerabilities in Google Chrome, which exist due to insufficient input validation. These...
PT-2016-6884
Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.61T1 and later Cisco IOS XE affected versions not specified Description The issue allows remote authenticated users to read arbitrary files due to insufficient input validation by the affected framework. An attacker could...
Cisco IOS Software Data in Motion Denial of Service Vulnerability (cisco-sa-20160914-ios-xe)
A vulnerability in the Data in Motion DMo application in Cisco IOS software with the IOx feature set could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the DMo process. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the Bluetooth component in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges by connecting devices via Bluetooth while the main user is working...
TYPO3 Form Component Arbitrary File Disclosure Vulnerability
TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. An arbitrary file disclosure vulnerability exists in the TYPO3 Form component. An attacker could exploit this vulnerability to obtain sensitive information because the program...