Schneider Electric EcoStruxure Operator Terminal Expert 数据伪造问题漏洞

Schneider Electric EcoStruxure Operator Terminal Expert is a touch screen configuration software from Schneider Electric, France. This software support is mainly used for creating and editing touch applications. A data forgery vulnerability exists in Schneider Electric EcoStruxure Operator Termin...

CandidATS 跨站脚本漏洞

CandidATS is a free and open source recruiter tracking system from CandidATS India. steal is an extensible common module loader from StealJS open source. It can load JavaScript modules defined in ES6, AMD and CommonJS formats. A security vulnerability exists in CandidATS version 3.0.0 that stems...

PT-2022-26044 · Unknown · Fastest-Json-Copy

Name of the Vulnerable Software and Affected Versions: fastest-json-copy version 1.0.1 Description: The issue allows an external attacker to edit or add new properties to an object because the application does not correctly validate the incoming JSON keys, thus allowing the proto property to be...

SAP 3D Visual Enterprise Author SLDDRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Author. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

Splunk 代码注入漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

Cloudflare WARP 数据伪造问题漏洞

Cloudflare WARP Cloudflare Vpn is a client application for secure connectivity from Cloudflare, Inc. A security vulnerability exists in the Cloudflare WARP Zero Trust platform that stems from insufficient policy validation in the WARP iOS client, which allows an attacker to bypass the Lock Warp...

PT-2022-6989 · Mediatek · Mediatek Wlan

Name of the Vulnerable Software and Affected Versions: MediaTek WLAN software affected versions not specified Description: The issue is related to a possible out of bounds write in the WLAN service due to improper input validation. This could lead to local escalation of privilege, with System...

CVE-2022-2782

In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the session token parameters...

PT-2022-6993 · Cisco · Cisco Catalyst Sd-Wan Manager

Name of the Vulnerable Software and Affected Versions: Cisco Catalyst SD-WAN Manager affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to inject HTML content. This issue is due to improper validation of...

The vulnerability in the web interface of the Cisco Identity Services Engine allows a perpetrator to read and modify files on a vulnerable device.

The vulnerability of the Cisco Identity Services Engine’s web interface relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to read and modify files on the vulnerable device by sending a specially crafted HTTP request...

The vulnerability of the J-Web interface in Juniper Networks Junos OS allows a perpetrator to gain unauthorized access to protected information or execute arbitrary commands.

The vulnerability of the J-Web interface in Juniper Networks Junos OS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or execute arbitrary commands ...

The vulnerability of the implementation of the IP/MPLS protocol in Juniper Networks’ Junos OS-based QFX10000 series routers allows a attacker to cause a service failure.

The vulnerability of the IP/MPLS protocol implementation in Juniper Networks’ Junos OS-based QFX10000 routers stems from improper validation of certain indices, positions, or offsets in the input data. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending...

CVE-2021-44769

An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Denial-of-Service DoS condition which can only be reverted via a factory reset. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0...

Design/Logic Flaw

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Versions prior to 2.5.4 contain a file upload ability. The affected code fails to validate fileMd5 and fileName parameters, resulting in an arbitrary file being read. This...

Vulnerability of the Server component: The Optimizer of the MySQL Server database management system, which allows a hacker to execute arbitrary code.

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of component C of the MySQL Server database management system allows a hacker to cause a service failure.

The vulnerability of the C API component of the MySQL Server database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the Moxa MXView network control software lies in its lack of functionality for checking the path name of the restricted access directory. This allows attackers to read arbitrary files.

The vulnerability of the Moxa MXView network control software is related to deficiencies in checking the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to read arbitrary files remotely...

CVE-2022-42340

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction...

Adobe ColdFusion Application Server Directory Traversal Arbitrary File Disclosure Or Deletion Vulnerability

This vulnerability allows remote attackers to disclose or delete sensitive files on affected installations of Adobe ColdFusion. Authentication is required to exploit this vulnerability. The specific flaw exists within the Application Server endpoint, which listens on TCP port 8500 by default. The...

CVE-2022-32485

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...