CWE-20

A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code e

In InoERP 0.7.2, an unauthorized attacker can execute arbitrary code on the server side due to lack of validations in /m

VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability. Improper input val

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers

An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming ad

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arb

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arb

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arb

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arb

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arb

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic

SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access

In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessibl

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary c

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary c

Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary

Improper access control vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows attackers t

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdrago

NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Specia

In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing i

In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing i

In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the se

There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may caus

A vulnerability in PKI Security Solution of Dream Security could allow arbitrary command execution. This vulnerability i

In Expression Engine before 6.0.3, addonIcon in Addons/file/mod.file.php relies on the untrusted input value of input->g

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to miss

A vulnerability in Base Software for SoftControl allows an attacker to insert and run arbitrary code in a computer runni

WriteRegistry function in TSSServiSign component does not filter and verify users’ input, remote attackers can rewrite t

The network address administrative settings web portal for the Zoom on-premise Meeting Connector before version 4.6.360.

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked

Input validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to argument injection and e

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability ma

Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data.

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows U

An issue was discovered in the raw-cpuid crate before 9.1.1 for Rust. If the serialize feature is used (which is not the

A flaw was found in keycloak in versions before 13.0.0. A Self Stored XSS attack vector escalating to a complete account

There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of this vulnerability ca

Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses pa

Deleting users with certain names caused system files to be deleted. Risk is higher for systems which allow users to reg

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an imprope

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an imprope

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an imprope

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an imprope

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an imprope

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an imprope