Adobe Framemaker Input Validation Error Vulnerability (CNVD-2024-40918)

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. Adobe Framemaker suffers from an input validation error vulnerability that stems from an integer overflow. An...

Progress LoadMaster和Progress Multi-Tenant Hypervisor 输入验证错误漏洞

Progress LoadMaster and Progress Multi-Tenant Hypervisor are both products of Progress, Inc. Progress LoadMaster is a high performance application delivery controller ADC and load balancer. Progress Multi-Tenant Hypervisor is a multi-tenant hypervisor. Tenant Hypervisor is a multi-tenant...

Origin Validation Error

Overview gradio is a Python library for easily interacting with trained machine learning models Affected versions of this package are vulnerable to Origin Validation Error due to the CustomCORSMiddleware class. An attacker can make unauthorized requests and potentially access sensitive data...

CVE-2024-47962

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can manipulate an insider to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current...

Adobe Animate 输入验证错误漏洞

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from an integer overflow or wrap-around vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Schneider Electric Zelio Soft 输入验证错误漏洞

Schneider Electric Zelio Soft is a suite of logic controller programming software from Schneider Electric France. An input validation error vulnerability exists in Schneider Electric Zelio Soft versions prior to v5.4.2.2, which stems from the presence of an incorrect input validation vulnerabilit...

Microsoft Hyper-V 输入验证错误漏洞

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. A security feature bypass vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to bypass certain features...

Livewire 输入验证错误漏洞

Livewire is Livewire open source a full stack framework for Laravel that allows you to build dynamic UI components without leaving PHP. An input validation error vulnerability exists in Livewire prior to version v3.5.2, which stems from unvalidated actual file extensions for filenames...

Redis 输入验证错误漏洞

Redis is an open source, ANSI C, web-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis, Inc. and provides APIs in multiple languages. An input validation error vulnerability exists in Redis. An attacker could use this vulnerability to cause a denial of...

D-Link DIR-605L 安全漏洞

The D-Link DIR-605L is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-605L version 2.13B01 BETA, which originates from the webpage parameter of the formSetWanL2TP function in the /goform/formSetWanL2TP page that fails to correctly validate the...

Sonarr 输入验证错误漏洞

Sonarr is a software from Sonarr that helps find, download and organize TV shows. An input validation error vulnerability exists in versions prior to Sonarr 4.0.9.2244, which originates from a redirection to an untrusted site...

WordPress plugin Payflex Payment Gateway 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

Esri Portal For ArcGIS 输入验证错误漏洞

Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. An input validation error vulnerability exists in Esri Portal For ArcGIS that stems fr...

GNOME Project G Structured File Library 输入验证错误漏洞

GNOME Project G Structured File Library GNOME libgsf is a GNOME project open-sourced by GNOME. Provides an abstraction layer for different structured file formats. An input validation error vulnerability exists in GNOME Project G Structured File Library version v1.14.52, which stems from the...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. Mozilla Firefox suffers from an origin validation error that originates...

Google Go 输入验证错误漏洞

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google, Inc. An input validation error vulnerability exists in Google Go that stems from the system not properly validating input, which allows a user to pass arbitrary parameters to the...

Rockwell Automation SequenceManager Input Validation Error Vulnerability

Rockwell Automation SequenceManager is a basic controller-based batch management from Rockwell Automation USA. An input validation error vulnerability exists in versions of Rockwell Automation SequenceManager prior to 2.0, which can be exploited by an attacker to send an incorrectly formatted...

Eclipse GlassFish 输入验证错误漏洞

Eclipse GlassFish is an open source application server from the Eclipse Foundation. An input validation error vulnerability exists in Eclipse GlassFish versions prior to 7.0.17, which stems from a Host HTTP parameter that may cause a web application to redirect to a specified URL when the request...

Scout 输入验证错误漏洞

Scout is an open source platform from Clinical Genomics for analyzing VCFs and being able to aid collaborations to solve rare diseases faster. An input validation error vulnerability exists in Scout versions prior to 4.89 that stems from the presence of an open redirection vulnerability that allo...

Rockwell Automation SequenceManager 安全漏洞

Rockwell Automation SequenceManager is a basic controller-based batch management from Rockwell Automation USA. An input validation error vulnerability exists in versions of Rockwell Automation SequenceManager prior to 2.0, which can be exploited by an attacker to send an incorrectly formatted...