Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows. An attacker exploiting this vulnerability could cause a denial of service on the system. The following products and...

PT-2024-31611 · Sunshine · Sunshine

Name of the Vulnerable Software and Affected Versions: Sunshine affected versions not specified Description: The issue occurs when clients experience a Man-in-the-Middle MITM attack during the pairing process. This may allow access to an unintended client rather than failing authentication due to...

Dell Precision Rack BIOS 输入验证错误漏洞

Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products from Dell USA. The Dell Precision Rack BIOS is vulnerable to an input validation error vulnerability that originates from incorrect input validation. Exploitation of this vulnerability by a highly privileged...

Microsoft SQL Server 输入验证错误漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. An input validation error vulnerability exists in Microsoft SQL Server. An attacker can exploit the vulnerability to elevate privileges. The following products and...

Uniong WebITR 输入验证错误漏洞

Uniong WebITR is an online time and attendance system from China Kaifa Uniong. An input validation error vulnerability exists in Uniong WebITR 21027 and prior versions, which stems from the fact that a user can be tricked into redirecting to another page via a spoofed URL, which could lead to a...

Loway QueueMetrics 输入验证错误漏洞

Loway QueueMetrics is a tool from Loway that allows you to automate the installation of a pre-configured QueueMetrics system on the most common Asterisk distributions. An input validation error vulnerability exists in Loway QueueMetrics version 22.11.6, which stems from a URL redirection to an...

CVE-2024-44821

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha...

IBM Security Verify Access Input Validation Error Vulnerability (CNVD-2024-37608)

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as the Web, mobile, IoT and cloud using risk-based access, single sign-on, integrated access management controls...

CVE-2024-8260 OPA SMB Force-Authentication

A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of improper input validation, allowing a user to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI or to one of the OPA Go library’s...

Tenda FH1206 romSetIpBind Function Buffer Overflow Vulnerability

The Tenda FH1206 is a wireless router from Tenda China. The Tenda FH1206 suffers from a buffer overflow vulnerability that stems from the romSetIpBind function failing to correctly validate the length size of the input data, no details of the vulnerability are available at this time...

Dell BIOS Input Validation Error Vulnerability (CNVD-2024-37419)

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. The Dell BIOS suffers from an input validation error vulnerability that stems from the presence of incorrect input validation, which can be exploited by an attacker with elevated privileges and...

Dell PowerEdge Platform 输入验证错误漏洞

Dell PowerEdge Platform is a server platform from Dell USA. An input validation error vulnerability exists in Dell PowerEdge Platform version 2.22.x and prior versions, which stems from the inclusion of an incorrect input validation vulnerability...

IBM Security Verify Access 输入验证错误漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as the Web, mobile, IoT and cloud using risk-based access, single sign-on, integrated access management controls...

libexpat 输入验证错误漏洞

libexpat is a streaming XML parser written in C by the libexpat team. An input validation error vulnerability exists in libexpat versions prior to 2.6.3, which stems from dtdCopy in xmlparse.c on 32-bit platforms that can lead to an nDefaultAtts integer overflow...

Adobe Experience Manager Input Validation Error Vulnerability (CNVD-2024-37805)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An inp...

Adobe Experience Manager 输入验证错误漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An inp...

CVE-2024-7795 Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability

Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Business C50 EV chargers...

WordPress plugin Salon booking system 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

WordPress plugin Easy PayPal Buy Now Button 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

Adobe Illustrator Input Validation Error Vulnerability (CNVD-2024-36361)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An input validation error vulnerability exists in Adobe Illustrator that stems from incorrect input validation. An attacker could exploit this vulnerability to cause a denial of service on...