Dell BIOS 输入验证错误漏洞

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. An input validation error vulnerability exists in Dell BIOS, which stems from incorrect input validation. An attacker could use the SMI Serial Interface to execute arbitrary code in SMRAM...

File Upload Type Validation Error

Description The upload functionality for updating user profile does not properly validate the file content-type, allowing any authenticated user to bypass this security check by adding a valid signature p.e. GIF89 and sending any invalid content-type. This could allow an authenticated attacker to...

Shopware 输入验证错误漏洞

Shopware is a suite of open source e-commerce software from German company Shopware. Shopware suffers from an input validation error vulnerability that originates from the ability to use AP to place the same line item into the shopping cart multiple times. This allows users to bypass sales quanti...

Git 输入验证错误漏洞

Git is a free, open source distributed version control system. Git suffers from an input validation error vulnerability that stems from the presence of an integer overflow problem...

gibb-modul-151 输入验证错误漏洞

gibb-modul-151 is a GIBB web module by calesanz individual developers. An input validation error vulnerability exists in calesanz gibb-modul-151, which stems from the bearbeiten/login function, and manipulation leads to open redirects...

Publify 输入验证错误漏洞

Publify is a simple but full-featured web publishing software. versions of Publify prior to 9.2.10 contain an input validation error vulnerability that stems from the fact that it allows the insertion of large characters "title name and post field" into the input field of an article field, allowi...

Linux kernel 输入验证错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel version 6.1.5 and earlier, which stems from an integer overflow in rndisqueryoid in drivers/net/wireless/rndiswlan.c. The...

Juniper Networks Junos OS 输入验证错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS, Junos OS Evolved, which originates from an ind...

Juniper Networks Junos OS 输入验证错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS is vulnerable to an input validation error vulnerability that originates from an index validatio...

Alotcer AR7088H 输入验证错误漏洞

The Alotcer AR7088H is an embedded edge router from Alotcer China. A security vulnerability exists in the Alotcer AR7088H firmware version 16.10.3, which stems from incorrect validation of unspecified input fields for command execution, allowing authenticated command execution...

GitLab Enterprise Edition和GitLab Community Edition 输入验证错误漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in Gitlab CE/EE versions 11.4 through 15.5.7, 15.6...

Adobe InCopy 输入验证错误漏洞

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy is vulnerable to an input validation error, which can be exploited by attackers to execute arbitrary code in the context of the current user...

AMD Athlon 输入验证错误漏洞

AMD Athlon is a family of microprocessors from UltraMicroelectronics AMD. An input validation error vulnerability exists in AMD Athlon™ Processors, Ryzen™ Processors, and Threadripper™ Processors, which stems from a failure to validate that communication buffers and communication services in the...

GHSA-2PJ2-GCHF-WMW7 Zip4j Origin Validation Error

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive. This issue has been fixed in version 2.11.3...

Pandora 输入验证错误漏洞

Pandora is an analysis framework for finding out if a file is suspicious and displaying the results conveniently. A security vulnerability exists in Pandora version 1.3.0, which stems from the fact that workers/extractor.py allows denial of service when an attacker submits a deeply nested ZIP...

bzip2 输入验证错误漏洞

bzip2 is an open source compression/decompression application. A security vulnerability exists in bzip2-rs, which stems from allowing an attacker to cause a denial of service via a large file, which triggers an integer overflow in mem.rs...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from the presence of integer overflows and buffer overflows that result in memory corruption. The following products are affected: APQ8064AU, APQ8096AU,...

GPAC MP4Box 输入验证错误漏洞

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. An input validation error vulnerability exists in GPAC MP4Box version 2.1-DEV-rev574-g9d5bb184b, which...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. Google Android suffers from a security vulnerability that is exploited by attackers to escalate privileges without additional execution privileges...

go-ipld-prime 输入验证错误漏洞

go-ipld-prime is an IPLD open source implementation of the ipld specification interface. A input validation error vulnerability exists in go-ipld-prime, which stems from the fact that its encoded data containing Bytes class nodes will pass a Bytes token to the JSON encoder, since it does not expe...