5694 matches found
WebsitePanel before v1.2.2.1 - Open Redirect
Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in ReturnUrl to Default.aspx id: CVE-2012-4032 info: name: WebsitePanel before v1.2.2.1 - Open Redirect author:...
GO-2024-3038 vulnerabilities
Vulnerabilities for packages: guac...
CVE-2026-72660
Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged access can cause an internal error condition in Kibana by supplying specially crafted data...
EUVD-2026-58271
Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged access can cause an internal error condition in Kibana by supplying specially crafted data...
Kibana 8.19.20, 9.3.8, and 9.4.5 Security Update (ESA-2026-101)
Uncaught Exception in Kibana Leading to Denial of Service Description: Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged access can cause an...
CVE-2026-71390 CAI Content Credentials | Improper Input Validation (CWE-20)
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user...
CVE-2026-71390
CAI Content Credentials is affected by an Improper Input Validation vulnerability (CWE-20) that could bypass security features and grant unauthorized limited write access. CVE-2026-71390; impact details: local attacker, no user interaction required, with a base CVSSv3.1 score of 4.0 (Medium). Exp...
CVE-2026-48436
Affected software/area: CAI Content Credentials. Vulnerability type: Improper Input Validation leading to a security feature bypass. Root cause / nature: Input validation flaw could allow bypass of security measures, enabling unauthorized write access. Impact: Security feature bypass with unautho...
CVE-2026-48436 CAI Content Credentials | Improper Input Validation (CWE-20)
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...
CVE-2026-21279
The CVE-2026-21279 entry concerns Adobe ColdFusion (per CVE records) and describes an Improper Input Validation vulnerability that enables a Security feature bypass. The root cause is input validation failure allowing an attacker to bypass protections and gain unauthorized read access and limited...
CVE-2026-21279 ColdFusion | Improper Input Validation (CWE-20)
is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction...
CVE-2026-48384
Technical details (affected product/version, root cause, exploit specifics) are not publicly provided in the provided documents. Monitor for updates; no public technical details are included to assess vulnerability specifics beyond the general description.
CVE-2026-48384 ColdFusion | Improper Input Validation (CWE-20)
ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker with high privileges could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...
CVE-2026-21273
CVE-2026-21273 affects Adobe ColdFusion . The description shows an Improper Input Validation vulnerability that could lead to privilege escalation . A low-privileged attacker could gain unauthorized read/write access, but exploitation requires a victim to open a malicious file and user interactio...
CVE-2026-21273 ColdFusion | Improper Input Validation (CWE-20)
is affected by an Improper Input Validation vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious...
CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)
Overview Rapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when chained together, achieve unauthenticated remote code execution RCE against a vulnerable SharePoint server. Today, both Rapid7 and Microsoft ar...
Security Update for Microsoft Power BI Report Server (August 2026)
The Microsoft Power BI Report Server on the remote host is missing the February 2026 security update. It is, therefore, affected by an RCE vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 809...
MiracleLinux 8 : grafana-9.2.10-32.el8_10 (AXSA:2026-1417:20)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1417:20 advisory. github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation CVE-2026-44740 Tenable has extracted the preceding...
