Adobe FrameMaker 输入验证错误漏洞

Adobe Framemaker is a set of page layout software for writing and editing large or complex documents including structured documents from Adobe. Adobe FrameMaker has an input validation error vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the curre...

Adobe Photoshop 输入验证错误漏洞

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from an input validation error vulnerability that originates from improper user input validation and can be exploited by an...

Dell PowerEdge Server BIOS Buffer Overflow Vulnerability

Dell PowerEdge Server BIOS is a system update driver for Dell, a Dell USA company. Dell PowerEdge Server BIOS buffer overflow vulnerability, which stems from a SMM communication buffer validation error. A local attacker with elevated privileges could exploit this vulnerability to perform arbitrar...

Adobe After Effects 输入验证错误漏洞

Adobe After Effects is a suite of visual effects and motion graphics software from Adobe. Adobe After Effects is vulnerable to an input validation error, which could be exploited to execute arbitrary code in the context of the current user...

Dell Alienware Command Center Input Validation Error Vulnerability

Dell Alienware Command Center is a series of gaming laptops from Dell, U.S.A. An input validation error vulnerability exists in Dell Alienware Command Center version 5.5.37.0 and prior, which stems from incorrect validation of user input. An attacker could use this vulnerability to send malicious...

Adobe Bridge 输入验证错误漏洞

Adobe Bridge is a file viewer from Adobe, Inc. Adobe Bridge is vulnerable to an input validation error that could be exploited to execute arbitrary code in the context of the current user...

JSA10375 - Pulse Connect Secure (PCS): Cross-Site Scripting Vulnerability

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. Older software versions of Pulse Connect Secure are prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute an arbitrary script. This issue is...

SAP NetWeaver Application Server 输入验证错误漏洞

SAP NetWeaver Application Server is an application server from SAP. SAP NetWeaver Application Server for ABAP and ABAP Platform versions 700, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, An input validation error vulnerability exists in version 790. An attacker could use this...

SAP NetWeaver AS 输入验证错误漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides network services, but also the basic platform for SAP software. An input validation error vulnerability exists in SAP NetWeaver AS for ABAP and ABAP Platform. An attacker could use this vulnerability to redirect...

HCL Leap 输入验证错误漏洞

HCL Leap is a low-code development platform from HCL Corporation. HCL Leap has a security vulnerability. An attacker exploited the vulnerability to cause an open redirection of the site...

Qualcomm 芯片输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and often fabricated on the surface of semiconductor wafers. A security vulnerability exists in the Qualcomm chip wlan driver, which stems fro...

Qualcomm 芯片输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and often manufactured on the surface of semiconductor wafers. A security vulnerability exists in Qualcomm's chip engineermode services, which...

Dell Alienware Command Center 输入验证错误漏洞

Dell Alienware Command Center is a series of gaming laptops from Dell, U.S.A. An input validation error vulnerability exists in Dell Alienware Command Center version 5.5.37.0 and prior, which stems from incorrect validation of user input. An attacker could use this vulnerability to send malicious...

Dell Rugged Control Center Input Validation Error Vulnerability

Dell Rugged Control Center is an application from Dell USA. It allows a range of settings to be configured on the ruggedized device, such as application settings, keyboard backlight settings, night mode settings, stealth mode settings, window settings, antenna switch settings and GPS settings. An...

SAMSUNG Mobile devices 输入验证错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices from the South Korean company Samsung, including cell phones and tablets. A security vulnerability exists in SAMSUNG Mobile devices versions prior to R1112.2.09, Android S1213.1.03.501, and Android T1314.1.00.422, which stems from...

adblock-lists 输入验证错误漏洞

adblock-lists are block lists used by AdBlock. Brave adblock-lists has a security vulnerability that stems from the presence of open redirects...

Kibana 输入验证错误漏洞

Elastic Kibana is an application from the Dutch company Elastic. A free and open user interface that enables you to visualize Elasticsearch data and lets you navigate through the Elastic Stack. Kibana has a security vulnerability. An attacker exploited the vulnerability to cause the server proces...

IBM API Connect 输入验证错误漏洞

IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from International Business Machines IBM. The product supports creating, running, managing, and securing APIs, microservices, and more. A security vulnerability exists in IBM API Connect that stems from...

Linux kernel input validation error vulnerability (CNVD-2023-58992)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An input validation error vulnerability exists in Linux kernel. An attacker could exploit this vulnerability to cause a memory leak and system crash...

CVE-2023-0728

The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajaxsavefolder function. This makes it possible for unauthenticated attackers to invoke this function via forg...