MediaWiki 输入验证错误漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. MediaWiki suffers from an input validation error vulnerability that stems from insufficient...

Orangehrm 输入验证错误漏洞

Orangehrm is a human resource management system HRM from Orangehrm, Inc. The system supports personnel information management, leave management, attendance management and recruitment management, etc. Orangehrm version 4.10 has an input validation error vulnerability, which stems from vulnerabilit...

Softwarebuero Zauner ARC 安全漏洞

Softwarebuero Zauner ARC is an application. softwarebuero Zauner ARC version 4.2.0.4 contains an input validation error vulnerability that stems from improper case-sensitive handling, which could be exploited by an attacker to cause easier password guessing...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. A vulnerability exists in the Huawei HarmonyOS DFX module due to an input validation error. The vulnerability stems from the presence of improper validation of integrity check values in the DFX module. An attacker could exploit this...

CVE-2021-32985 AVEVA System Platform Origin Validation Error

AVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communication is valid...

CVE-2021-32985 AVEVA System Platform Origin Validation Error

AVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communication is valid...

Google Android 信任管理问题漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a trust management issue vulnerability that stems from a certificate validation error in A-GPS. A remote attacker can exploit this vulnerability to perform MitM attacks...

Medialize URI.js 输入验证错误漏洞

Medialize URI.js is a Javascript-based code library that can be used to efficiently splice URLs from the Medialize team. A security vulnerability exists in medialize/uri.js, no information about the vulnerability is available at this time, please keep watching CNNVD or vendor announcements...

GitLab 输入验证错误漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. GitLab is vulnerable to an input validation error vulnerability that exists du...

MicroWorld Technologies eScan Anti-Virus 输入验证错误漏洞

MicroWorld Technologies eScan Anti-Virus is an Internet security solution from MicroWorld Technologies, USA. It provides virus protection for enterprise and home SOHO users. The MicroWorld Technologies eScan Anti-Virus is prone to an input validation error vulnerability that originates from inval...

GitLab Community Edition和GitLab Enterprise Edition输入验证错误漏洞

GitLab Enterprise Edition is a content management system.GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An input validation error vulnerability exists in GitLab Community Edition CE and Enterprise Edition EE due to insufficient validation of user-supplied input in the...

NETGEAR R6700v3 Input Validation Error Vulnerability

NETGEAR R6700v3 is the Nighthawk AC1750 Smart Dual Band Gigabit Router from Netgear USA. The NETGEAR R6700v3 suffers from an input validation error vulnerability that lacks proper validation of user-supplied data. An attacker can exploit the vulnerability to execute arbitrary code...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that results from improper input validation in messaging. An attacker could use this vulnerability to obtain sensitive information...

Oracle MySQL Buffer Overflow Vulnerability (CNVD-2022-25202)

Oracle MySQL Server is a relational database from Oracle Corporation. A buffer error vulnerability exists in MySQL Server due to an input validation error in the Server:Optimizer component in MySQL Server. A remote attacker could exploit this vulnerability to corrupt or delete data...

NETGEAR R6700输入验证错误漏洞

NETGEAR R6700v3 is the Nighthawk AC1750 Smart Dual Band Gigabit Router from Netgear USA. The NETGEAR R6700v3 suffers from an input validation error vulnerability that lacks proper validation of user-supplied data. An attacker can exploit the vulnerability to execute arbitrary code...

Apache Apisix 输入验证错误漏洞

Apache Apisix is a cloud-native microservices API gateway service from the Apache Foundation. The software is based on OpenResty and etcd, with dynamic routing and plugin hot-loading for API management in microservices systems. An attacker could use this vulnerability to bypass the bodyschema...

Broadcom Netegrity SiteMinder 输入验证错误漏洞

Broadcom Netegrity SiteMinder is a single sign-on management system from Broadcom, Inc. It provides single sign-on and centralized management of Web, database, and software resources in enterprise applications. An input validation error vulnerability exists in the Login component of Broadcom...

Nvidia NVIDIA CUDA Toolkit 输入验证错误漏洞

Nvidia NVIDIA CUDA Toolkit is a development software application for creating high-performance GPU-accelerated applications from Nvidia Corporation. An integer overflow vulnerability exists in the NVIDIA CUDA Toolkit SDK that could be exploited by remote attackers to cause remote code execution,...

Nozomi Networks Guardian Input Validation Error Vulnerability

Nozomi Networks Guardian is an IoT device and software inspection system from Nozomi Networks, Switzerland. An input validation error vulnerability exists in versions of Nozomi Networks Guardian prior to 22.0.0, which can be exploited by an authenticated attacker with the administrator or import...

Apache Traffic Server Input Validation Error Vulnerability (CNVD-2022-41636)

Apache Traffic Server ATS is a set of scalable HTTP proxy and caching servers from the Apache Foundation in the U.S. An input validation error vulnerability exists in Apache Traffic Server versions 8.0.0 through 8.1.3 and 9.0.0 through 9.1.1, which stems from a request parsing incorrect input...