Lucene search
+L

6011 matches found

CNNVD
CNNVD
•added 2022/08/01 12:00 a.m.•12 views

Google Pixel 输入验证错误漏洞

Google Pixel is a smartphone from the American company Google Google. The Google Pixel kernel suffers from an input validation error vulnerability that stems from a vulnerability that can be exploited by an attacker to cause elevation of privilege...

6.7CVSS6.6AI score0.00105EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/08/01 12:00 a.m.•16 views

Google Pixel 输入验证错误漏洞

Google Pixel is a smartphone from the American company Google Google. There is a security vulnerability in the Google Pixel kernel that stems from a vulnerability that can be exploited by an attacker to cause elevation of privilege...

6.7CVSS6.6AI score0.00107EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/08/01 12:00 a.m.•31 views

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android, which is caused by a failure to properly enter authentication in the get of PacProxyService.java. A locally authenticated attacker could exploit this vulnerability to...

5.5CVSS5.7AI score0.00102EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/08/01 12:00 a.m.•37 views

Realtek AP-Router SDK 输入验证错误漏洞

The Realtek AP-Router SDK is a software package for wireless chipsets from Realtek Semiconductor Realtek of China. The Realtek AP-Router SDK suffers from an input validation error vulnerability that originates from remote code execution via a crafted SIP packet containing malicious SDP data...

9.8CVSS9.1AI score0.3708EPSS
SaveExploits2References4
CNNVD
CNNVD
•added 2022/08/01 12:00 a.m.•16 views

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from the American company Google Google. A security vulnerability exists in Google Android 10, 11, 12, 12L. An attacker exploiting the vulnerability could result in local elevation of privilege...

6.2CVSS5.8AI score0.001EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/08/01 12:00 a.m.•17 views

DSpace 输入验证错误漏洞

DSpace is an open source turnkey repository application from the DuraSpace community. An input validation error vulnerability exists in DSpace versions 4.0 through 6.3, which stems from the vulnerability of a JSPUI-controlled vocabulary servlet to an open redirection attack, where an attacker can...

7.1CVSS6.6AI score0.00859EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/07/28 12:00 a.m.•16 views

Citrix ADC 和 Citrix Gateway 输入验证错误漏洞

Citrix ADC is one of the most comprehensive application delivery and load balancing solutions from US-based Citrix, Inc. for application security, overall visibility and availability. An input validation error vulnerability exists in Citrix ADC and Citrix Gateway, which can be exploited by an...

6.1CVSS6.3AI score0.00538EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/07/27 12:00 a.m.•19 views

FreshTomato 缓冲区错误漏洞

FreshTomato is a Linux-based open source firmware from FreshTomato Open Source. The firmware provides a variety of features for Broadcom-based routers. An input validation error vulnerability exists in FreshTomato version 2022.1, which stems from a specially crafted HTTP request that could lead t...

9.8CVSS6.4AI score0.01305EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/07/27 12:00 a.m.•18 views

Contec SolarView Compact 输入验证错误漏洞

Contec SolarView Compact is an application system from Contec Japan. which provides photovoltaic power measurement systems. Contec SolarView Compact suffers from an input validation error vulnerability that stems from insufficient input validation provided in the image file management page. An...

8.8CVSS8.4AI score0.01479EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/26 12:00 a.m.•4 views

CVE-2022-1497: Origin Validation Error

Inappropriate implementation in Input in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to spoof the contents of cross-origin websites via a crafted HTML page...

6.5CVSS6.7AI score0.00541EPSS
SaveExploits1References2
Mend
Mend
•added 2022/07/25 3:29 p.m.•5 views

CVE-2022-35650

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature...

8.7CVSS0.53652EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2022/07/22 12:00 a.m.•21 views

OpenZeppelin 输入验证错误漏洞

OpenZeppelin is a software application. A standard for secure blockchain applications. An input validation error vulnerability exists in OpenZeppelin Contracts versions 4.0.0 through 4.7.1, which stems from its susceptibility to being recovered by the ERC165 Checker instead of returning false...

7.5CVSS7.2AI score0.00788EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/07/22 12:00 a.m.•10 views

SQLite 输入验证错误漏洞

SQLite is a lightweight database, a relational database management system that adheres to ACID. security vulnerabilities exist in versions prior to SQLite 3.39.2, which originate from the auxiliary C API. no details of the vulnerabilities are currently available...

7.5CVSS5.5AI score0.23251EPSS
SaveExploits2References30
CNNVD
CNNVD
•added 2022/07/21 12:00 a.m.•20 views

undici 输入验证错误漏洞

undici is an HTTP/1.1 client. undici suffers from an input validation error vulnerability that stems from the cookie header found in the specification to be a sensitive header and an official header, which remains unpurged. There are active users in undici that use cookie headers. This could resu...

6.5CVSS6.4AI score0.00739EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2022/07/20 12:00 a.m.•19 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser from Google, Inc. and V8 is one of the open source JavaScript engines. Google Chrome suffers from an Input Validation Error vulnerability, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

4.3CVSS6.2AI score0.00838EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2022/07/20 12:00 a.m.•15 views

Apple macOS Big Sur 输入验证错误漏洞

Apple macOS Big Sur is the 17th major release of Apple's macOS for MAC operating system from Apple USA. Apple macOS Big Sur suffers from an input validation error vulnerability that stems from an application that may be able to overwrite arbitrary files...

7.1CVSS7AI score0.00737EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2022/07/19 12:00 a.m.•9 views

Oracle MySQL 输入验证错误漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation. MySQL Server is one of the database server components, and a denial-of-service vulnerability exists in Oracle MySQL Server. An attacker can use this vulnerability to cause MySQL Server to hang or crash...

4.9CVSS5.2AI score0.01364EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2022/07/19 12:00 a.m.•19 views

Oracle Fusion Middleware 输入验证错误漏洞

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities. SOA Suite is a component for building, deploying, and managing Service...

6CVSS6.5AI score0.00738EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/07/19 12:00 a.m.•26 views

Oracle Enterprise Manager Base Platform 输入验证错误漏洞

Oracle Enterprise Manager Base Platform is a set of local management platform of Oracle Oracle. The platform is primarily used to manage Oracle product deployments. An input validation error vulnerability exists in Oracle Enterprise Manager Base Platform component: Enterprise Manager Install...

7.3CVSS5.6AI score0.00734EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/07/19 12:00 a.m.•18 views

Oracle FLEXCUBE Universal Banking 输入验证错误漏洞

Oracle FLEXCUBE Universal Banking is a general purpose digital banking system from Oracle Corporation. An input validation error vulnerability exists in Oracle FLEXCUBE Universal Banking component: Infrastructure versions 12.1 through 12.4, 14.0 through 14.3, and 14.5, which can be exploited by a...

6.4CVSS7.2AI score0.00664EPSS
SaveExploits0References3
Rows per page
Query Builder