FortiWeb - OS Command Injection because of missing input parameter sanitization

Multiple improper neutralization of special elements vulnerabilities CWE-89 used in a command in FortiWeb may allow an authenticated attacker to execute unauthorized code or commands via crafted parameters of HTTP requests...

PT-2019-11013

Name of the Vulnerable Software and Affected Versions: NVIDIA Tegra TLK Widevine Trust Application affected versions not specified Description: The issue is related to missing input parameter checking of video metadata count, which may lead to Arbitrary Code Execution, Denial of Service, or...