Lucene search
+L

92854 matches found

Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•20 views

PT-2026-91847

Improper input validation vulnerability in bizwell xClick allows Stored XSS. This issue affects xClick: R2, R3, and R3.1...

5.1CVSS5.7AI score0.00376EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•46 views

PT-2026-92153

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.1.0.0 through 9.1.0.37 LTS IBM MQ versions 9.2.0.0 through 9.2.0.43 LTS IBM MQ versions 9.3.0.0 through 9.3.0.41 LTS IBM MQ versions 9.3.0.0 through 9.3.5.1 CD IBM MQ versions 9.4.0.0 through 9.4.0.25 LTS IBM MQ versions...

8.1CVSS6.2AI score0.0038EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•6 views

CVE-2026-47780: Improper Input Validation

free5GC is an open-source implementation of the 5G core network. In 4.2.3 and earlier, HandleCreateEeSubscriptions and HandleQueryeesubscriptions in free5gc/udr internal/sbi/apidatarepository.go validate the ueId path value with a regular expression whose final .+ alternative accepts every...

6.9CVSS8AI score0.00538EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•9 views

CVE-2026-79410: Improper Input Validation

Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce their order total below the legitimate price of shippable goods...

8.1CVSS5.8AI score0.00392EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•26 views

PT-2026-92164

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 15.7 through 19.1.7 GitLab CE/EE versions 19.2 through 19.2.5 GitLab CE/EE versions 19.3 through 19.3.1 Description An issue exists where improper input validation in the environment scope pattern matcher could allow an...

7.7CVSS5.8AI score0.00209EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•7 views

CVE-2026-19655: Improper Input Validation

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol DHCP relay/snooping configured with the information option Option 82, or with the DHCP server configured with match criteria based on the information option, an unauthenticated attacker connected to a client-facing...

7.1CVSS5.8AI score0.00194EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•30 views

PT-2026-92350

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Improper input validation in the FsmReleaseKey function within fsm.c allows for a permission bypass. This issue enables local escalation of privilege without...

8.4CVSS5.8AI score0.00102EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•26 views

PT-2026-92300

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Improper input validation in multiple locations allows for an out-of-bounds write, which is a condition where data is written outside the boundaries of a...

6.7CVSS5.8AI score0.00098EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•21 views

PT-2026-92295

Name of the Vulnerable Software and Affected Versions Cellular Modem affected versions not specified Description Improper input validation in the Cellular Modem allows for a remote denial of service. This issue can be exploited without user interaction or additional execution privileges...

7.5CVSS5.9AI score0.0035EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•22 views

PT-2026-92331

In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.7CVSS5.9AI score0.0015EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•6 views

CVE-2026-57008: Improper Input Validation

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS5.8AI score0.00326EPSS
SaveExploits0References3
Redos
Redos
•added 2026/09/15 12:00 a.m.•15 views

ROS-20260915-73-0104

The vulnerability of the Wallet component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...

4.3CVSS6.1AI score0.00154EPSS
SaveExploits0
Redos
Redos
•added 2026/09/15 12:00 a.m.•12 views

ROS-20260915-73-0072

The vulnerability of the Loader component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

3.1CVSS6.1AI score0.00186EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•23 views

PT-2026-92148

Name of the Vulnerable Software and Affected Versions IBM Verify Identity Access affected versions not specified Description Improper validation of user supplied input could allow an administrator to execute additional commands they are not entitled to. Recommendations At the moment, there is no...

7.2CVSS6AI score0.00316EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•3 views

CVE-2026-91738: Improper Input Validation

Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS6.9AI score0.00339EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•7 views

CVE-2026-56975: Improper Input Validation

In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.5CVSS5.9AI score0.0015EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•10 views

CVE-2026-58744: Improper Input Validation

In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.8AI score0.00096EPSS
SaveExploits0References3
Redos
Redos
•added 2026/09/15 12:00 a.m.•15 views

ROS-20260915-73-0044

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

5.9CVSS6.6AI score0.00189EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•23 views

PT-2026-92322

In validate ns buf of mbu class.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

4.4CVSS5.9AI score0.00094EPSS
SaveExploits0References2
Redos
Redos
•added 2026/09/15 12:00 a.m.•14 views

ROS-20260915-73-0173

The vulnerability of the Video Capture component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise data integrity through a specially crafted HTML page...

3.3CVSS6AI score0.00122EPSS
SaveExploits0
Rows per page
Query Builder