Lucene search
+L

1111 matches found

BDU FSTEC
BDU FSTEC
added 2023/07/25 12:0 a.m.8 views

The vulnerability of Google Chrome’s Themes component, which allows a hacker to trigger a service failure

The vulnerability of the Google Chrome browser’s Themes component exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS5.4AI score0.00552EPSS
Exploits1References9Affected Software5
ATTACKERKB
ATTACKERKB
added 2023/07/11 6:15 p.m.6 views

CVE-2023-35373

Mono Authenticode Validation Spoofing Vulnerability...

5.3CVSS6.7AI score0.00805EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/10 12:0 a.m.9 views

The vulnerability of the software networking facility for UaGateway servers, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the software networking mechanism for UaGateway servers relates to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS6.5AI score0.00588EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2023/07/06 3:15 a.m.23 views

CVE-2023-30665

Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds read...

4.4CVSS4.6AI score0.00165EPSS
Exploits0References1
Prion
Prion
added 2023/07/06 3:15 a.m.21 views

Input validation

Improper input validation vulnerability in LSOItemData prior to SMR Jul-2023 Release 1 allows attackers to launch certain activities...

4.3CVSS7.5AI score0.00185EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2023/07/06 3:15 a.m.22 views

Input validation

Improper input validation vulnerability in RegisteredMSISDN prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

4.3CVSS7.4AI score0.00176EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/07/06 12:0 a.m.6 views

SAMSUNG Mobile device 缓冲区错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile device SMR Jul-2023 Release 1 version, which stems from an incorrect input validation vulnerability ...

7.8CVSS7.3AI score0.00174EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/07/06 12:0 a.m.6 views

SAMSUNG Mobile device 输入验证错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile device SMR Jul-2023 Release 1 version, which stems from an incorrect input validation vulnerability ...

8.5CVSS7.3AI score0.00185EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/07/06 12:0 a.m.5 views

SAMSUNG Mobile device 输入验证错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile device SMR Jul-2023 Release 1 version, which stems from an incorrect input validation vulnerability ...

8.5CVSS7.3AI score0.00176EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/06/27 11:39 a.m.13 views

CVE-2023-35798 Airflow Apache ODBC and MSSQL Providers Arbitrary File Read Vulnerability

Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use getsqlalchemyconnection and someone with access to connection resources...

4.7AI score0.01263EPSS
Exploits0References2
Code423n4
Code423n4
added 2023/06/23 12:0 a.m.11 views

Users potentially cannot have Canto token swapped automatically when bridging assets to the Canto Network

Lines of code Vulnerability details Impact If the field AutoSwapThreshold is set to zero value, the logic that compares standardCoinBalance to the autoSwapThreshold always evaluates to false so there isn't any swap operation from bridged asset to Canto token for users. Therefore, the purpose of t...

6.8AI score
Exploits0
CNNVD
CNNVD
added 2023/06/23 12:0 a.m.8 views

Dell BIOS 输入验证错误漏洞

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. Dell BIOS has an input validation error vulnerability that stems from incorrect input validation. An attacker could exploit this vulnerability to modify UEFI variables...

6.7CVSS6.6AI score0.00168EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/06/15 12:0 a.m.8 views

CVE-2023-29293 Adobe Commerce | Improper Input Validation (CWE-20)

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An admin privileged attacker could leverage this vulnerability to impact the availability of a user's...

2.7CVSS6.6AI score0.00914EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/05/30 3:12 p.m.34 views

CVE-2023-24568

Dell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port which could disallow replacing CA signed certificates...

5CVSS5.5AI score0.00227EPSS
Exploits0References1
Veracode
Veracode
added 2023/05/24 3:22 a.m.84 views

Remote Code Execution (RCE)

codeigniter4/framework is vulnerable to Remote Code Execution RCE. The vulnerability exists because the Validation.php does not properly validate the validation placeholders, which allows an attacker to inject and execute malicious code...

9.8CVSS7.6AI score0.01126EPSS
Exploits0References5Affected Software1
CNVD
CNVD
added 2023/05/19 12:0 a.m.43 views

Budget And Expense Tracker System SQL Injection Vulnerability

Budget And Expense Tracker System is a web based application. It is used to manage your personal/small business budget and expenses. Budget and Expense Tracker System v1.0 suffers from a SQL injection vulnerability that originates from a lack of validation of the parameter id of...

8.8CVSS8.3AI score0.00734EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2023/05/16 12:0 a.m.38 views

F5 BIG-IP Edge Client Windows Component Installer < 7.2.4.1 Improper Certificate Validation (K000132539)

The version of the Big-IP Edge Client Windows Component Installer installed on the remote Windows host is before 7.2.4.1. An improper certificate validation vulnerability exists in BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM system. CVE-2023-2446...

7.4CVSS6AI score0.00286EPSS
Exploits0References2
NVD
NVD
added 2023/05/15 11:15 a.m.23 views

CVE-2022-47392

An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead to a denial-of-service condition...

6.5CVSS6.7AI score0.00862EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/05/10 7:20 p.m.13 views

CVE-2023-31148 Improper Input Validation in Web Interface

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to execute arbitrary code. See SEL Service Bulletin dated 2022-11-15 for more details...

9.1CVSS9.2AI score0.01086EPSS
Exploits0References2
CNVD
CNVD
added 2023/05/04 12:0 a.m.9 views

CLTPHP Input Validation Error Vulnerability

CLTPHP is an open source and efficient site-building PHP content management system. An input validation error vulnerability exists in CLTPHP version 6.0 and earlier versions, which stems from incorrect input validation in application/admin/controller/Template.php. An attacker can exploit this...

8.1CVSS6.9AI score0.00734EPSS
Exploits0References1
Rows per page
Query Builder