Lucene search
+L

7583 matches found

ATTACKERKB
ATTACKERKB
added 2026/01/15 11:25 p.m.10 views

CVE-2021-47785

Ether MP3 CD Burner 1.3.8 contains a buffer overflow vulnerability in the registration name field that allows remote code execution. Attackers can craft a malicious payload to overwrite SEH handlers and execute a bind shell on port 3110 by exploiting improper input validation...

9.8CVSS6.5AI score0.00848EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2026/01/15 3:31 p.m.21 views

Keycloak has an improper input validation vulnerability

A flaw was found in Keycloak. This improper input validation vulnerability occurs because Keycloak accepts RFC-compliant matrix parameters in URL path segments, while common reverse proxy configurations may ignore or mishandle them. A remote attacker can craft requests to mask path segments,...

3.7CVSS6.6AI score0.00368EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/15 12:00 a.m.29 views

PT-2026-2984

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in Keycloak related to improper input validation. The software accepts RFC-compliant matrix parameters within URL path segments, which may be ignored or mishandled by common...

3.7CVSS6.3AI score0.00368EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/01/14 9:18 p.m.23 views

chi has an open redirect vulnerability in the RedirectSlashes middleware

Summary The RedirectSlashes function in middleware/strip.go does not perform correct input validation and can lead to an open redirect vulnerability. Details The RedirectSlashes function performs a Trim to all forward slash / characters, while prepending a single one at the begining of the path...

4.7CVSS6.7AI score0.00215EPSS
SaveExploits0References6Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/14 7:25 p.m.8 views

CVE-2026-21268

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

8.6CVSS7.6AI score0.0022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 7:25 p.m.9 views

CVE-2026-21272

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could leverage this vulnerability to manipulate or inject malicious data into files on the system. Exploitation of this issue requir...

8.6CVSS6.7AI score0.00202EPSS
SaveExploits0References1
CNVD
CNVD
added 2026/01/14 12:00 a.m.13 views

Delta Electronics DVP-12SE11T Improper Input Validation Vulnerability

Delta Electronics DVP-12SE11T is a networked mainframe from Delta Electronics China. The Delta Electronics DVP-12SE11T suffers from an improper input validation vulnerability that can be exploited by an attacker to cause a denial of service...

7.5CVSS6AI score0.00315EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/13 10:52 p.m.10 views

CVE-2026-20976

Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script...

7.8CVSS7.1AI score0.00151EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/13 9:31 p.m.11 views

GHSA-W2GR-585J-R428 Metricbeat affected by multiple denial of service vulnerabilities

Improper Validation of Array Index CWE-129 exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation CAPEC-153 via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input...

6.5CVSS5.5AI score0.00343EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/01/13 9:10 p.m.36 views

CVE-2026-0543 Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation

Improper Input Validation CWE-20 in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation CAPEC-130 through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector...

6.5CVSS0.00377EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/13 9:10 p.m.6 views

CVE-2026-0543 Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation

Improper Input Validation CWE-20 in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation CAPEC-130 through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector...

6.5CVSS6.1AI score
SaveExploits0References3
EUVD
EUVD
added 2026/01/13 9:10 p.m.13 views

EUVD-2026-2035

Improper Input Validation CWE-20 in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation CAPEC-130 through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector...

6.5CVSS6.3AI score0.00377EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/13 7:16 p.m.5 views

CVE-2026-21268

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

8.6CVSS6.3AI score0.0022EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/13 7:16 p.m.13 views

CVE-2026-21271

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

8.6CVSS0.0022EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/13 7:16 p.m.5 views

CVE-2026-21272

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could leverage this vulnerability to manipulate or inject malicious data into files on the system. Exploitation of this issue requir...

8.6CVSS5.9AI score0.00202EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/13 7:16 p.m.14 views

CVE-2026-21272

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could leverage this vulnerability to manipulate or inject malicious data into files on the system. Exploitation of this issue requir...

8.6CVSS0.00202EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/13 7:16 p.m.17 views

CVE-2026-21268

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

8.6CVSS0.0022EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/13 6:25 p.m.33 views

CVE-2026-21271 Dreamweaver Desktop | Improper Input Validation (CWE-20)

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

8.6CVSS0.0022EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/13 6:25 p.m.8 views

CVE-2026-21271 Dreamweaver Desktop | Improper Input Validation (CWE-20)

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

8.6CVSS7.3AI score0.0022EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/13 6:25 p.m.29 views

CVE-2026-21271

Dreamweaver Desktop (Windows/macOS) versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that can lead to arbitrary code execution in the context of the current user when a user opens a malicious file. The issue requires user interaction and has been fixed in newer...

8.6CVSS7.3AI score0.0022EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder