5957 matches found
RedisBloom 输入验证错误漏洞
RedisBloom is a library from the RedisBloom open source. Adds a set of probabilistic data structures to Redis. RedisBloom suffers from an input validation error vulnerability that stems from the presence of an integer overflow vulnerability that allows an attacker to allocate less than the requir...
Mozilla Firefox 输入验证错误漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An input validation error vulnerability previously existed in Mozilla Firefox version 134, which stemmed from an attacker being able to spoof the address bar when redirected to an invalid protocol sche...
Redis 输入验证错误漏洞
Redis is an open source, ANSI C, network-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis, Inc. that provides APIs in multiple languages. An input validation error vulnerability exists in Redis version 7.0.0 and later. This vulnerability can be exploited ...
Qualcomm Chipsets 输入验证错误漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated Qualcomm. An input validation error vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when calling any IOCTL-calling application that executes all MCDM driver IOCTL calls...
Huawei Myna Input Validation Error Vulnerability
Huawei Myna is a smart speaker from Chinese company Huawei Huawei. Huawei Myna suffers from an Input Validation Error vulnerability that originates from a module that does not adequately integrity check inputs in certain scenarios. An attacker can exploit this vulnerability to affect the normal...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an input validation error vulnerability that originates from improper input validation of the prepareresponselocked function in the lwistransaction.c file, which can be exploited by an attacker t...
CVE-2024-55917
An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...
CVE-2024-55917
An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...
CVE-2024-55917
An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...
CVE-2024-55917
CVE-2024-55917 is a local privilege escalation in Trend Micro Apex One caused by an origin validation error. The issue allows a local attacker who can run low-privilege code to escalate to SYSTEM, with the attack surface tied to the Apex One components and services referenced in the linked adviso...
Trend Micro Apex One 安全漏洞
Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that stems from the presence of a source validation error vulnerability that allows a local attacker to elevate privileges on an affected installation...
CVE-2024-55917: Origin Validation Error
An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...
Huawei Myna 安全漏洞
Huawei Myna is a smart speaker from Chinese company Huawei Huawei. Huawei Myna suffers from an Input Validation Error vulnerability that originates from a module that does not adequately integrity check inputs in certain scenarios. An attacker can exploit this vulnerability to affect the normal...
IBM Cognos Analytics Input Validation Error Vulnerability (CNVD-2025-00307)
IBM Cognos Analytics is a suite of business intelligence software from International Business Machines IBM. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. An input validation...
IBM AIX和IBM Vios 输入验证错误漏洞
IBM AIX and IBM Vios are both products of the International Business Machines IBM Corporation.IBM AIX is an open standards-based UNIX operating system developed for the IBM Power architecture.IBM Vios is part of the PowerVm® Editions hardware feature. IBM Vios is part of the PowerVm® Editions...
CVE-2022-21505: Origin Validation Error
In the linux kernel, if IMA appraisal is used with the "imaappraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "imaappraise=log" from the boot param when Secure Boot is enabled, but this does not cover case...
IBM InfoSphere Information Server Input Validation Error Vulnerability (CNVD-2024-49166)
IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An input validation error vulnerability exists in IBM InfoSphere Information Server version 11.7...
DataEase 输入验证错误漏洞
DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insight into business trends to achieve business improvement and optimization. DataEase v1.18.27 prior to the version of the input validation error...
CVE-2024-54083 DoS via lack of type validation in Calls
Mattermost versions 10.1.x = 10.1.2, 10.0.x = 10.0.2, 9.11.x = 9.11.4, 9.5.x = 9.5.12 fail to properly validate the type of callProps which allows a user to cause a client side webapp and mobile DoS to users of particular channels, by sending a specially crafted post...
Adobe Connect Input Validation Error Vulnerability (CNVD-2025-02845)
Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. An input validation error vulnerability exists in Adobe Connect, which stems from the system's failure to appropriately handle target jumps, and can be exploited by an attacker to redirect a use...