The vulnerability of the netmon_process_record() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the netmonprocessrecord function, a traffic analyzer in Wireshark, is related to the lack of input data validation for cyclic operations. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2025-5996

An issue has been discovered in GitLab CE/EE affecting all versions from 2.1.0 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2. A lack of input validation in HTTP responses could allow an authenticated user to cause denial of service...

CVE-2025-3111

An issue has been discovered in GitLab CE/EE affecting all versions from 10.2 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A lack of input validation in the Kubernetes integration could allow an authenticated user to cause denial of service...

Linux Distros Unpatched Vulnerability : CVE-2021-44500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of input validation in calls to ebdiv in srport/ebmuldiv.c allows...

CVE-2024-9743: Heap-based Buffer Overflow

Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerabilit...

Open Redirect

github.com/coder/coder is vulnerable to Open Redirect. The vulnerability is due to lack of proper input validation on the Coder login page, allows attackers to manipulate the URL and redirect users to malicious websites...

CVE-2024-40431: Undefined Security Weakness

A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTLSCSIPASSTHROUGH control of the SD card reader driver allows an attacker to write to predictable kernel memory locations, even as a low-privileged user...

CVE-2024-30110

HCL DRYiCE AEX product is impacted by lack of input validation vulnerability in a particular web application. A malicious script can be injected into a system which can cause the system to behave in unexpected ways...

CVE-2023-37346

Kofax Power PDF TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

Many issues around addGlobalToken due to lack of input validation when linking a global token to local token

Lines of code Vulnerability details Impact addGlobalToken is used to add a global token to a branch. The flow as follows: 1 = CoreBranchRouter.addGlobalToken 2 = Send Cross-Chain request System Response/Request with FuncId 0x01 Notice that is uses normal callOut though. Anyway, let's continue...

NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within th...

Lack of input validation

Lines of code Vulnerability details Impact There is no input sanitizer implemented for the transfertypes.FungibleTokenPacketData data variable. Proof of Concept After "unmarshaling" the packet, which checks if there is an error, it is used right away without further checking the fields inside it,...

CVE-2023-23560: Server-Side Request Forgery (SSRF)

In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation...

PT-2022-10044

Name of the Vulnerable Software and Affected Versions Cyclos 4 PRO versions 4.14.7 and before Description The issue allows a remote unauthenticated attacker to execute javascript code via an undefined enum constant due to a lack of user input validation at error inform. Recommendations For Cyclos...

CVE-2021-44482

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to doverify in srunix/doverify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer...

PT-2022-9811

Name of the Vulnerable Software and Affected Versions GE UR firmware versions prior to 8.1x Description The issue concerns the web interface of the GE UR firmware, which has read-only access but fails to properly validate user input. This failure makes it possible to perform cross-site scripting...

PT-2022-15049

Name of the Vulnerable Software and Affected Versions Jupyter Server Proxy versions prior to 3.2.1 Description The issue is related to Server-Side Request Forgery SSRF due to a lack of input validation, allowing authenticated clients to proxy requests to other hosts and bypass the allowed hosts...

PT-2022-9954

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description The issue is related to a possible heap memory corruption due to lack of input validation when sending the HWTC IQ Capture command. This affects various Qualcomm Snapdragon...

CVE-2021-30268: Buffer Copy without Checking Size of Input

Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

PT-2021-15494

Name of the Vulnerable Software and Affected Versions ts-nodash versions prior to 1.2.7 Description The issue is related to Prototype Pollution via the Merge function due to a lack of validation input. This affects the ts-nodash package. Recommendations For versions prior to 1.2.7, update to...