Oracle MySQL Connector/Python Data Access

The vulnerability of the Connector/Python driver for MySQL Connectors in the Oracle MySQL database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, add, modify, or delete data, or to cau...

Cisco Firepower Management Center security vulnerabilities

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A cross-site scripting vulnerability exists in Cisco Firepower Management Center, which arises from insufficient validation of user-supplied input in the web management interface, and can ...

Matrix libolm security vulnerabilities

Matrix libolm olm is a cryptographic library from the Matrix Foundation. A security vulnerability exists in Matrix libolm version 3.2.16 and prior versions, which stems from the lack of a validation standard and the presence of Ed25519 signature extensibility...

PT-2024-18508 · Flashc · Flashc

Name of the Vulnerable Software and Affected Versions: flashc affected versions not specified Description: The issue is related to a possible out of bounds write in flashc due to a lack of validation. This could lead to local escalation of privilege, with System execution privileges needed. User...

PT-2023-31712 · Unknown · Englesystem

Name of the Vulnerable Software and Affected Versions: Englesystem versions prior to 3.4.1 Description: Englesystem is a shift planning system for chaos events. The system performed insufficient validation of user-supplied data for the DECT number, mobile number, and work-log comment fields. This...

Cisco Unified Communications Manager DoS

The vulnerabilities of the Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P are related to insufficient checking of incoming requests duri...

Car Rental Script Security Vulnerabilities

Car Rental Script is an open source vehicle rental script by GZ Script. A security vulnerability exists in PHPJabbers Car Rental Script version 3.0, which stems from a lack of validation when changing e-mail addresses or passwords...

Extensions API Installation

The vulnerability of the Extensions API for Google Chrome and Microsoft Edge is related to insufficient data validation. Exploiting this vulnerability could allow an attacker to install any desired extension by using a specially created HTML page...

MySQL Server Privilege Escalation

Vulnerability of the MySQL Server component: The MySQL Server database management system has vulnerabilities due to insufficient validation of input data. Exploitation of these vulnerabilities can allow attackers to gain privileged access or cause service interruptions from a remote location...

ltiff buffer error vulnerability

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. LibTIFF suffers from an out-of-bounds read vulnerability that stems from a lack of proper validation of user-supplied data, where specially...

Secure Channel Windows DoS

The vulnerability of the Secure Channel component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Wedding Management System SQL Injection Vulnerability

Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from Wedding-Management/admin/ select.php page lacks validation of externally entered SQL statements,...

Oracle MySQL Cluster Database Disclosure DoS

Vulnerability of the Oracle MySQL Cluster component: The general system management of databases in Oracle MySQL Cluster is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

PYSEC-2021-847

TensorFlow is an open source platform for machine learning. In affected versions several TensorFlow operations are missing validation for the shapes of the tensor arguments involved in the call. Depending on the API, this can result in undefined behavior and segfault or CHECK-fail related crashes...

PYSEC-2021-845

TensorFlow is an open source platform for machine learning. In affected versions several TensorFlow operations are missing validation for the shapes of the tensor arguments involved in the call. Depending on the API, this can result in undefined behavior and segfault or CHECK-fail related crashes...

WordPress cross-site scripting vulnerabilities

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. The WordPress Plugin suffers from a cross-site scripting vulnerability that stems from the...

Ericsson Network Manager Cross-site Scripting Vulnerability

Ericsson Network Manager is a network manager from Ericsson, Sweden. It covers monitoring, troubleshooting, configuration, automation and optimization of networks. Ericsson Network Manager suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-si...

IBM Engineering Lifecycle Optimization Cross-site Scripting Vulnerability

IBM Engineering Lifecycle Optimization ELO is an extension of the Engineering Lifecycle Management ELM portfolio from IBM America. They make it easier to collect and analyze data across the development environment to make better decisions. Automate reporting to ensure that the entire organization...

PYSEC-2021-535

TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in SparseAdd results in allowing attackers to exploit undefined behavior dereferencing null pointers as well as write outside of bounds of heap allocated data. The...

PYSEC-2021-244

TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in SparseAdd results in allowing attackers to exploit undefined behavior dereferencing null pointers as well as write outside of bounds of heap allocated data. The...