QEMU Input Validation Error Vulnerability (CNVD-2020-47958)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. An input validation error vulnerability exists in QEMU. An attacker can exploit this vulnerability with osswrite to cause a...

CVE-2020-8870

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Cisco Data Center Network Manager Input Validation Error Vulnerability (CNVD-2020-48589)

Cisco Data Center Network Manager DCNM is a data center management system from Cisco. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. An input validation error vulnerability exists in the REST API method in Cisco Dat...

IBM Content Navigator Input Validation Error Vulnerability (CNVD-2020-47545)

IBM Content Navigator is a Web client from IBM USA. The product supports searching and processing documents stored in content servers from a Web browser. An input validation error vulnerability exists in IBM Content Navigator version 3.0CD. An attacker can exploit this vulnerability to bypass the...

bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c

An assertion failure was found in BIND, which checks the validity of messages containing TSIG resource records. This flaw allows an attacker that knows or successfully guesses the name of the TSIG key used by the server to use a specially-crafted message, potentially causing a BIND server to reac...

Palo Alto Networks PAN-OS Input Validation Error Vulnerability (CNVD-2020-49272)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An input validation error vulnerability exists in Palo Alto Networks PAN-OS. The vulnerability arises from a network system or product that does not properly validate incoming data. An...

QEMU Input Validation Error Vulnerability (CNVD-2020-46814)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A security vulnerability exists in QEMU 5.0.0 and earlier versions. An attacker could exploit the vulnerability to cause a...

Cisco 7937G Input Validation Error Vulnerability

The Cisco 7937G is an online conferencing endpoint device from Cisco USA. A security vulnerability exists in the Cisco 7937G versions 1-4-4-0 through 1-4-5-7. An attacker could exploit the vulnerability to cause a denial of service...

bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c

An assertion failure was found in BIND, which checks the validity of messages containing TSIG resource records. This flaw allows an attacker that knows or successfully guesses the name of the TSIG key used by the server to use a specially-crafted message, potentially causing a BIND server to reac...

Assmann Electronic DIGITUS DA-70254 4-Port Gigabit Network Hub Input Validation Error Vulnerability

The Assmann Electronic DIGITUS DA-70254 4-Port Gigabit Network Hub is a Gigabit network hub from Assmann Electronic, Germany. An input validation error vulnerability exists in Assmann Electronic DIGITUS DA-70254 4-Port Gigabit Network Hub version 2.073.000.E0008. The vulnerability arises from the...

etcd input validation error vulnerability (CNVD-2020-47967)

etcd is a key-value storage system for distributed systems written in the Go language. An input validation error vulnerability exists in etcd versions prior to 3.3.23 and prior to 3.4.10. The vulnerability stems from a network system or product that does not properly validate input data. No...

CVE-2020-15652: Origin Validation Error

By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. This vulnerability affects Firefox 79, Firefox ESR 68.11, Firefox ESR 78.1, Thunderbird 68.11, and Thunderbi...

CVE-2020-16168

Origin Validation Error in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to access the REST API and MQTT broker used by the temi and send it custom data/requests via unspecified vectors...

CVE-2020-16168

Origin Validation Error in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to access the REST API and MQTT broker used by the temi and send it custom data/requests via unspecified vectors...

CVE-2020-16168

Origin Validation Error in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to access the REST API and MQTT broker used by the temi and send it custom data/requests via unspecified vectors...

CVE-2020-16168: Origin Validation Error

Origin Validation Error in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to access the REST API and MQTT broker used by the temi and send it custom data/requests via unspecified vectors...

Cisco Webex Meetings Desktop App Input Validation Error Vulnerability (CNVD-2020-45577)

Cisco Webex Meetings Desktop App is a video conferencing control application for use in desktop environments from Cisco USA. An input validation error vulnerability exists in the user interface of the Cisco Webex Meetings Desktop App versions prior to 39.5.24, 40.4.6, and 40.6, which arises from...

Cisco StarOS Denial of Service Vulnerability (CNVD-2020-47969)

Cisco StarOS is a set of virtualization operating system of the American Cisco Cisco. An input validation error vulnerability exists in the IPv6 implementation of Cisco StarOS, which arises from the program's failure to adequately validate incoming IPv6 traffic. A remote attacker could exploit th...

etcd Input Validation Error Vulnerability

etcd is a key-value storage system for distributed systems written in the Go language. An input validation error vulnerability exists in etcd versions prior to 3.3.23 and prior to 3.4.10. The vulnerability stems from a network system or product that does not properly validate input data. A remote...

Solidus Input Validation Error Vulnerability

Solidus is an open source e-commerce system. An input validation error vulnerability exists in Solidus versions prior to 2.8.6, prior to 2.9.6, and prior to 2.10.2. The vulnerability stems from a network system or product that does not properly validate incoming data. No detailed vulnerability...