Pathval Input Validation Error Vulnerability

pathval is an Npm codebase for retrieving and setting objects based on String strings from the Chai.js team. A security vulnerability exists in pathval. No vulnerability details are available at this time...

Input validation error vulnerability in multiple Huawei products (CNVD-2020-68353)

Huawei HiRouter-CD30-10 and others are a wireless router from Huawei China. An input validation error vulnerability exists in multiple Huawei products. An attacker could use this vulnerability to cause service anomalies on affected devices within a local area network LAN...

Western Digital My Cloud Input Validation Error Vulnerability

Western Digital My Cloud is a personal cloud storage device from Western Digital. An input validation error vulnerability exists in Western Digital My Cloud NAS versions prior to 5.04.114, which stems from DsdkProxy.php failing to adequately sanitize and validate user input. No detailed...

Pulse Secure Pulse Connect Secure Input Validation Error Vulnerability (CNVD-2020-60092)

Pulse Secure Pulse Connect Secure a.k.a. PCS, formerly known as Juniper Junos Pulse is a suite of SSL VPN solutions from Pulse Secure in the United States. Pulse Connect Secure versions prior to 9.1R9 have an input validation error vulnerability that can be exploited by an attacker to execute an...

Exim Input Validation Error Vulnerability

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. An input validation error vulnerability exists in Exim versions 4.87 through 4.91. The vulnerability stems from a network system or product that does not properly validate incoming data. No...

CVE-2020-3864: Origin Validation Error

A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin...

Cisco Firepower Management Center Input Validation Error Vulnerability (CNVD-2021-05534)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. Cisco Firepower Management Center FMC suffers from an Input Validation Error vulnerability that stems from a failure to properly validate certificates. An attacker could exploit this...

CVE-2020-15682: Origin Validation Error

When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker could induce that prompt to be associated with an origin they didn't control, resulting in a spoofing attack. This was fixed by changing external...

SAP NetWeaver Application Server Java Input Validation Error Vulnerability

SAP NetWeaver Application Server Java is a German SAP SAP company provides a Java runtime environment of the application server. The product is mainly used to develop and run Java EE applications. A security vulnerability exists in SAP NetWeaver Application Server Java. No detailed vulnerability...

Juniper Networks Mist Cloud UI Input Validation Error Vulnerability

Juniper Networks Mist Cloud is a Juniper Networks USA platform that simplifies cloud management and helps users prevent vendor and complexity lock-in. It provides cost and utilization reporting, RBAC, management, provisioning, orchestration, monitoring and automation for servers across public and...

CVE-2020-9903: Origin Validation Error

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, Safari 13.1.2. A malicious attacker may cause Safari to suggest a password for the wrong domain...

KB4580330: Windows 10 Version 1803 October 2020 Security Update

The remote Windows host is missing security update 4580330. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and...

Cisco Small Business SPA500 Series IP Phones Input Validation Error Vulnerability

Cisco Small Business SPA500 Series IP Phones is an SPA500 series IP phone from Cisco USA. An input validation error vulnerability exists in Cisco Small Business SPA500 Series IP Phones using firmware version 7.6.2SR5 and earlier. The vulnerability stems from the fact that the device comes with...

Cisco Identity Services Engine Cross-Site Scripting Vulnerability (CNVD-2020-61955)

Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A cross-site scripting...

CVE-2020-26527: Origin Validation Error

An issue was discovered in API/api/Version in Damstra Smart Asset 2020.7. Cross-origin resource sharing trusts random origins by accepting the arbitrary 'Origin: example.com' header and responding with 200 OK and a wildcard 'Access-Control-Allow-Origin: ' header...

Pexip Infinity Input Validation Error Vulnerability (CNVD-2020-55174)

Pexip Infinity is a video conferencing cloud collaboration platform from Norway's pexip, a video communications software that organizations can deploy in their IT infrastructure, public or private cloud, or any hybrid combination to enable everyone to have their own personal high-quality video,...

Google TensorFlow Input Validation Error Vulnerability (CNVD-2020-55182)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. An input validation error vulnerability exists in Tensorflow versions prior to 1.15.4, 2.0.3, 2.1.2, 2.2.1, 2.3.1, and 2.3.1, which stems from the program's failure to adequately perform path...

PYSEC-2020-272

In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes a list of strings to dlpack.todlpack there is a memory leak following an expected validation failure. The issue occurs because the status argument during validation failures is not properly checked. Since each of the above methods ca...

VITToken Number Error Vulnerability

VITToken is an Ether-based digital currency. An input validation error vulnerability exists in the 'mintToken' function in VITToken's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

Mozilla Rust Input Validation Error Vulnerability (CNVD-2021-30571)

Rust is a general-purpose, compiled programming language. An input validation error vulnerability exists in Mozilla Rust version 0.6.2. The vulnerability stems from the Chunk implementation, where unit is executed without checking the size of the array. No details of the vulnerability are availab...