PT-2023-21498 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability to modify...

CVE-2022-46328

Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-39881

Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds memory...

PT-2022-21342 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to improper input validation in Dell BIOS, which could be exploited by a local authenticated malicious user. This exploitation could potentially lead to arbitrary cod...

PT-2022-20913 · Unknown · Ams Module

Name of the Vulnerable Software and Affected Versions: AMS module affected versions not specified Description: The issue is related to a vulnerability in input validation within the AMS module. This vulnerability can be exploited to cause privilege escalation. Recommendations: At the moment, ther...

Information Exposure

topthink/think is vulnerable to information exposure. The vulnerability exists due to a lack of input validation which allows an attacker to access sensitive informations in the system...

Datasette Cross-Site Scripting Vulnerability

Datasette is an open source multifunctional tool used by applications to explore and publish data. A cross-site scripting vulnerability exists in Datasette 0.57 and 0.56.1 that ? trace=1 input validation error. No detailed vulnerability details are provided at this time...

Unspecified Vulnerability in Zephyr

Zephyr is a small real-time operating system for connected, resource-constrained embedded devices. A security vulnerability exists in Zephyr versions = v1.14.2 and = v2.2.0. The vulnerability stems from improper input validation. An attacker could exploit the vulnerability to cause a denial of...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2021-37739)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS is vulnerable to an input validation error vulnerability, no details of the vulnerability are provided at this ti...

SAP GUI Input Validation Error Vulnerability

SAP GUI is a German SAP SAP company's application software. graphical user interface for the SAP system. An input validation error vulnerability exists in SAP GUI for Windows versions 7.60 and 7.70. The vulnerability stems from the program redirecting users to a specific malicious website, which...

Denial Of Service (DoS)

matrix-synapse is vulnerable to denial of service. The vulnerability exists due to missing input validation of some parameters on the endpoints used to confirm third-party identifiers...

Moodle Input Validation Error Vulnerability (CNVD-2021-22455)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier, which stems from a forum subscription...

Revive Adserver Input Validation Error Vulnerability (CNVD-2021-23389)

Revive Adserver is an open source advertising management system from the Revive Adserver team. The system provides ad placement, ad space management, data statistics and other functions. An input validation error vulnerability exists in Revive Adserver versions prior to 5.1.0, which stems from an...

MediaWiki Input Validation Error Vulnerability (CNVD-2021-38681)

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. An input validation error vulnerability exists in MediaWiki versions prior to...

Server-Side Request Forgery (SSRF)

node-pdf-generator is vulnerable to server-side request forgery SSRF. Lack of input validation allows an attacker to submit requests on behalf of the server...

Arbitrary Code Execution

kamailio is vulnerable to arbitrary code execution. Lack of input validation allows an attacker to execute arbitrary code on the system via a malicious SIP message containing multiple To header and an empty To tag, which results in a segmentation fault...

Soteria Input Validation Error Vulnerability

Soteria is a cloud backup risk solution. An input validation error vulnerability exists in versions of Soteria prior to 1.0.1. The vulnerability stems from a network system or product that does not properly validate incoming data. No details of the vulnerability are provided at this time...

CVE-2019-3961

Nessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker could potentially exploit this vulnerability via a specially crafted request to execute arbitrary script code in a users...

Input validation

In 2345 Security Guard 3.7, the driver file 2345BdPcSafe.sys, X64 version allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x002220e0...

CVE-2018-8873

In 2345 Security Guard 3.6, the driver file 2345NetFirewall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040...