Redis client for Go 输入验证错误漏洞

Redis client for Go is a Redis Go client for the Redis open source. An input validation error vulnerability exists in Redis client for Go, which stems from a CLIENT SETINFO timeout that can cause responses to be out of order, which can affect the response to connection and pipeline commands...

CVE-2025-2346

A vulnerability has been found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308 and classified as problematic. This vulnerability affects unknown code of the component Domain Handler. The manipulation of the argument Domain Name leads to origin validation error. The attack can be initiated...

CVE-2025-2346

A vulnerability has been found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308 and classified as problematic. This vulnerability affects unknown code of the component Domain Handler. The manipulation of the argument Domain Name leads to origin validation error. The attack can be initiated...

CVE-2025-2346

CVE-2025-2346 concerns IROAD Dash Cam X5 and X6 (up to 20250308). The vulnerability is described as affecting an unknown Domain Handler component, where manipulation of the Domain Name leads to an origin validation error. The attack is stated as remote with high attack complexity and partial impa...

ZTE GoldenDB Input Validation Error Vulnerability

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An input validation error vulnerability exists in ZTE GoldenDB, which...

Origin Validation Error

Rembg is vulnerable to Origin Validation Error. The vulnerability is due to improper CORS middleware configuration, which reflects all origins and sets allowcredentials to True, allowing any website to send authenticated cross-site requests to the Rembg server...

Cisco Content Security Management Appliance Access Authentication Error Vulnerability

Cisco Content Security Management Appliance SMA is a set of content security management equipment from Cisco Cisco. The appliance is mainly used to manage all policies, reports, audit information, etc. for e-mail and Web security devices. The Cisco Content Security Management Appliance has an...

编号撤回

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. An input validation error vulnerability exists in Delta Electronics CNCSoft-G2 version 2.1.0.16 and prior versions, which can be exploited by an attacker to execute code in the current process...

Tenda TX3 setstaticRoutecfg function buffer overflow vulnerability

Tenda TX3 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda TX3 16.03.13.11multi, which originates when the parameter list of goform /setstaticRoutecfg fails to correctly validate the length of the input data, and can be exploited by an attacker t...

Cisco IOS XR 输入验证错误漏洞

Cisco IOS XR is a set of operating systems developed by Cisco USA for its network devices. An input validation error vulnerability exists in Cisco IOS XR that stems from incorrect handling of malformed IPv4 multicast packets, which could result in a line card reset, leading to a denial of service...

IBM Control Center Input Validation Error Vulnerability (CNVD-2025-06654)

IBM Control Center is a centralized monitoring and management system from International Business Machines IBM. An input validation error vulnerability exists in IBM Control Center versions 6.2.1 through 6.3.1, which stems from improper user input validation, and can be exploited by an attacker to...

libzvbi 输入验证错误漏洞

libzvbi is a VBI utility in the zapping-vbi open source. An input validation error vulnerability exists in libzvbi version 0.2.43 and earlier, which stems from an integer overflow and could lead to a remote attack...

libzvbi 输入验证错误漏洞

libzvbi is a VBI utility in the zapping-vbi open source. An input validation error vulnerability exists in libzvbi version 0.2.43 and earlier, which stems from an integer overflow and could lead to a remote attack...

ZTE GoldenDB 输入验证错误漏洞

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An input validation error vulnerability exists in ZTE GoldenDB, which...

Siemens SiPass Integrated 输入验证错误漏洞

Siemens SiPass Integrated is a powerful and extremely flexible access control system from Siemens Germany. An input validation error vulnerability exists in the Siemens SiPass Integrated AC5102 ACC-G2 and ACC-AP V6.4.9 and earlier versions, which stems from not properly clearing user inputs on th...

libzvbi 输入验证错误漏洞

libzvbi is a VBI utility in the zapping-vbi open source. An input validation error vulnerability exists in libzvbi version 0.2.43 and earlier, which stems from an integer overflow and could lead to a remote attack...

Ashlar-Vellum Cobalt 输入验证错误漏洞

Ashlar-Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar-Vellum. An input validation error vulnerability exists in Ashlar-Vellum Cobalt that stems from an integer overflow when parsing an XE file, which could lead to remote code execution...

Siemens SiPass Integrated 输入验证错误漏洞

Siemens SiPass Integrated is a powerful and extremely flexible access control system from Siemens Germany. An Input Validation Error vulnerability exists in Siemens SiPass Integrated AC5102 ACC-G2 and ACC-AP V6.4.9 and earlier versions, which stems from incorrectly cleared inputs on the pubkey...

GE Vernova UR IED 输入验证错误漏洞

The GE Vernova UR IED is a series of protection relays from GE Vernova, USA. An input validation error vulnerability exists in GE Vernova UR IED versions 7.0 through 8.60, which stems from improper input validation and allows an attacker to establish a TCP connection via port forwarding...

Concrete CMS 输入验证错误漏洞

Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. An input validation error vulnerability exists in Concrete CMS versions 9.0.0 through 9.3.9, which stems from a lack of input cleanup in the Add Folder feature and could lead to a malicious...