The vulnerability of the goform/formEMR30 component of the Symantec Messaging Gateway, which exists due to insufficient validation of input data, allows a perpetrator to execute arbitrary code or escalate their privileges.

The vulnerability of the goform/formEMR30 component of the Symantec Messaging Gateway exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges or execute arbitrary code...

CVE-2022-29499

The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA...

The vulnerability of the VMware vCloud Director platform, a cloud storage management platform, allows a attacker to execute arbitrary code.

The vulnerability of the VMware vCloud Director platform for managing cloud storage repositories is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Webservices Manager component of the Oracle Communications Billing and Revenue Management software lies in insufficient validation of input data. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Webservices Manager component of the Oracle Communications Billing and Revenue Management software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility o...

PT-2022-2712 · Cisco · Cisco Iox +1

Name of the Vulnerable Software and Affected Versions: Cisco IOx affected versions not specified Description: The issue exists due to insufficient input validation in the Cisco IOx platform, allowing an attacker to potentially cause a denial of service by sending specially crafted TCP traffic...

The vulnerability of the Samples component of the Oracle WebLogic Server application server allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Samples component of the Oracle WebLogic Server application server exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Pipeline Manager component of Oracle Communications’ Billing and Revenue Management software allows a hacker to disclose protected information.

The vulnerability of the Pipeline Manager component of Oracle Communications’ Billing and Revenue Management software exists due to insufficient validation of input data. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by the system...

The vulnerability of the Unified Metadata Manager component of the Oracle Financial Services Analytical Applications Infrastructure software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Unified Metadata Manager component of the Oracle Financial Services Analytical Applications Infrastructure software relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

CVE-2022-22311

IBM Security Verify Access could allow a user, using man in the middle techniques, to obtain sensitive information or possibly change some information due to improper validiation of JWT tokens...

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to gain privileged access

Vulnerability of the MySQL Cluster component: General database management system vulnerabilities in MySQL Cluster exist due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain privileged access remotely...

Vulnerability of the MySQL Server component: This component of the database management system allows attackers to cause service failures or gain access to modify, add, or delete data.

The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or gain access to modify, add, or delete data using the MySQL network protocol...

The vulnerability of the Apache HTTP Server web server, related to input validation flaws, allows attackers to cause service interruptions.

The vulnerability of the Apache HTTP Server is related to input validation flaws. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted data to the application...

Dell Emc Data Protection Central 代码问题漏洞

Dell Emc Data Protection Central is a management console from Dell USA Inc. It is used for data protection. A server-side request forgery vulnerability exists in Dell EMC Data Protection Central 19.5 and prior versions, which stems from the product's failure to properly validate user input and ca...

CVE-2022-20640

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

CVE-2022-20641

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

BMC Community Track-It! 代码问题漏洞

BMC Community Track-It! is an It helpdesk software from BMC Community USA. It is used for help desks and helpdesks with asset management. A code issue vulnerability exists in BMC Community Track-It! that stems from the handling of email attachments that exist. The issue is caused due to a lack of...

The vulnerabilities of the TwinCAT OPC UA Server and IPC Diagnostics UA Server stem from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the TwinCAT OPC UA Server and IPC Diagnostics UA Server exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the JNDI component of the Apache Log4j2 logging library allows a perpetrator to execute arbitrary code.

The vulnerability of the JNDI component of the Apache Log4j2 logging library is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

CVE-2021-36335

Dell EMC CloudLink 7.1 and all prior versions contain an Improper Input Validation Vulnerability. A remote low privileged attacker, may potentially exploit this vulnerability, leading to execution of arbitrary files on the server...

VulnCheck KEV: CVE-2020-0069

Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue drivers ioctl handlers. This causes an out-of-bounds write leading to privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and...