Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6.779. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

NVIDIA GeForce Experience Web Helper Component Input Validation Vulnerability

NVIDIA GeForce Experience is a set of automatic update tools for graphics cards from NVIDIA. Web Helper is a component of Web Helper that automatically updates graphics card drivers and supports graphics card performance management and optimization. A security vulnerability exists in the Web Help...

Multiple D-Link Products Input Validation Error Vulnerability

D-Link DAP-1530 and so on are products of Taiwan, China AUO D-Link.D-Link DAP-1530 is a wireless signal extender.D-Link DAP-1610 is a wireless signal extender.D-Link DWR-111 is a wireless router.D-Link DAP-1610 is a wireless signal extender.D-Link DAP-1610 is a wireless signal extender.D-Link...

CVE-2019-1003080

A cross-site request forgery vulnerability in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptordoCheckLogin form validation method allows attackers to initiate a connection to an attacker-specified server...

OPENSUSE-SU-2019:1112-1 Security update for python-Flask

This update for python-Flask to version 0.12.4 fixes the following issues: Security issue fixed: - CVE-2018-1000656: Fixed an improper input validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. bsc1106279 This update was imported...

Remote Code Execution (RCE)

Sonatype Nexus is vulnerable to remote code execution. A lack of validation allows attackers to execute arbitrary code through the creation and deserialization of arbitrary object types...

Input Validation Vulnerability in Caret

Caret is a software package for plotting classification and regression models. An input validation vulnerability exists in versions of Caret prior to 2019-02-22 that originates from a networked system or product that does not properly validate incoming data. An attacker could exploit the...

PHP Scripts Mall Custom T-Shirt Ecommerce Script Input Validation Vulnerability

PHP Scripts Mall Custom T-Shirt Ecommerce Script is a website system for customizing t-shirts online by PHP Scripts Mall India. An input validation vulnerability exists in PHP Scripts Mall Custom T-Shirt Ecommerce Script version 3.1.1, which can be exploited by an attacker to change the amount of...

openSUSE: Security Advisory for python-urllib3 (openSUSE-SU-2019:0159-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

MacPaw CleanMyMac X Input Validation Vulnerability (CNVD-2019-23283)

MacPaw CleanMyMac X is a cleaning tool dedicated to the macOS platform. The product is capable of removing junk files, history cache, logs, etc. from your computer. An input validation vulnerability exists in the MacPaw CleanMyMac X version 4.04 helper service, which can be exploited by a local...

MacPaw CleanMyMac X Input Validation Vulnerability (CNVD-2019-23276)

MacPaw CleanMyMac X is a cleaning tool dedicated to the macOS platform. The product is capable of removing junk files, history cache, logs, etc. from your computer. An input validation vulnerability exists in the MacPaw CleanMyMac X version 4.04 helper service, which can be exploited by a local...

MacPaw CleanMyMac X Elevation of Privilege Vulnerability

MacPaw CleanMyMac X is a cleaning tool dedicated to the macOS platform from MacPaw USA. The product is capable of removing junk files, history cache, logs, etc. from your computer. An input validation vulnerability exists in MacPaw CleanMyMac X version 4.04. A local attacker can exploit the...

Horner Automation Cscape Input Validation Vulnerability

Horner Automation Cscape is a set of programming software for industrial control system application development from Horner Automation. An input validation vulnerability exists in Horner Automation Cscape 9.80.75.3 SP3 and prior versions, which arises from a failure of the program to validate use...

CVE-2018-19134

In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types. A specially crafted PostScript document could exploit this to crash Ghostscript or, possibly, execute arbitrary code in the context of the Ghostscript process. This is a type confusion issue...

Input validation

Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service DoS. This attack appear to be exploitable via The victim deserializes malicious input, specifically very large values in the...

RHEL 7 : ansible and openshift-ansible (RHSA-2017:0448)

An update for ansible and openshift-ansible is now available for Red Hat OpenShift Container Platform 3.2, Red Hat OpenShift Container Platform 3.3, and Red Hat OpenShift Container Platform 3.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Input validation

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

The vulnerability of the Apache HTTP Server web server, related to insufficient validation of input data, allows attackers to cause service failures.

The vulnerability of the Apache HTTP Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions by exhausting the number of simultaneous connections through continuous sending of Maximum Size SETTINGS type fram...

[ASA-201809-3] zsh: insufficient validation

Arch Linux Security Advisory ASA-201809-3 ========================================= Severity: Low Date : 2018-09-24 CVE-ID : CVE-2018-0502 CVE-2018-13259 Package : zsh Type : insufficient validation Remote : No Link : https://security.archlinux.org/AVG-764 Summary ======= The package zsh before...

Siemens SCALANCE X Switches Input Validation Vulnerability

Siemens SCALANCE X Switches is an industrial Ethernet switch from Siemens, Germany. An input validation vulnerability exists in Siemens SCALANCE X Switches, which could be exploited by an attacker with network access privileges to cause a denial of service...