ROS-20240329-25

Vulnerability of Zabbix universal monitoring system agent is related to incorrect control of code generation. code generation. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code Vulnerability of the Zabbix Universal Monitoring System agent is relat...

The vulnerability of the application software interface AllJoyn on Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the AllJoyn application programming interface for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of Adobe Experience Manager’s content and media data management system, related to insufficient validation of input data, allows attackers to circumvent existing security restrictions.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the USB Hub driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the USB Hub driver for Windows operating systems and Windows Server is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2024-4348 · Inpas Soft · Inpas Soft Uniport Eslip

Name of the Vulnerable Software and Affected Versions: INPAS SOFT UniPORT Eslip affected versions not specified Description: The issue is related to insufficient input validation, which can be exploited by a remote attacker to gain access to the application's administrative web interface...

ROS-2-2107

2.2107 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

ROS-2-1586

2.1586 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

ROS-2-1577

2.1577 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...

ROS-2-1781

2.1781 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...

The vulnerability of the Spectrum service for ArubaOS operating systems allows a intruder to trigger a service failure.

The vulnerability of the Spectrum service for ArubaOS is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a service failure using the PAPI protocol...

PT-2024-2158 · Microsoft · Skype For Consumer

Name of the Vulnerable Software and Affected Versions: Skype for Consumer affected versions not specified Description: The issue is related to insufficient input validation, allowing a remote attacker to execute arbitrary code. Exploitation may require user action, such as visiting a malicious...

PT-2024-2079 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The vulnerability is related to insufficient input validation in the Windows Hyper-V system, allowing a remote attacker to execute arbitrary code. This issue can be exploited by an...

Cisco Small Business Buffer Overflow Vulnerability (CNVD-2024-37606)

Cisco Small Business is a switch from the American company Cisco Cisco. Cisco Small Business suffers from a buffer overflow vulnerability that stems from insufficient validation of user-supplied input in the web-based user interface, which can be exploited by an authenticated, remote attacker to...

Path Traversal

pgadmin4 is vulnerable to Path Traversal. The vulnerability is due to Insufficient Input Validation due to concatenating the sessions directory path with the session ID using the os.path.join function, without setting a trusted base path, allowing an attacker to manipulate the session ID and...

openSUSE: Security Advisory for ovmf (SUSE-SU-2023:0036-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CMS Security Vulnerability

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! CMS that stems from insufficient validation of input...

AXIS OS RCE Vulnerability (Feb 2024)

AXIS OS is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:axis:axisos"; if...

CVE-2022-23093 Stack overflow in ping(8)

ping reads raw IP packets from the network to process responses in the prpack function. As part of processing a response ping has to reconstruct the IP header, the ICMP header and if present a "quoted packet," which represents the packet that generated an ICMP error. The quoted packet again has a...

Adobe Audition Heap-based Buffer Overflow Vulnerability (APSB24-11) - Windows

Adobe Audition is prone to a heap-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

dotnet: Denial of Service in SignalR server

A denial of service vulnerability is present in the .NET applications utilizing SignalR, which a malicious client can exploit. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service DoS attack by providing...