642 matches found
EUVD-2021-8166
Malicious code in bioql PyPI...
EUVD-2023-25607
Malicious code in bioql PyPI...
EUVD-2021-8173
Malicious code in bioql PyPI...
EUVD-2022-42325
Malicious code in bioql PyPI...
EUVD-2025-3735
Malicious code in bioql PyPI...
EUVD-2022-0600
Malicious code in bioql PyPI...
EUVD-2021-8019
Malicious code in bioql PyPI...
[SECURITY] [DLA 4302-1] node-sha.js security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4302-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès September 16, 2025 https://wiki.debian.org/LTS -...
CVE-2023-21472
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader...
CVE-2025-20269 Cisco Evolved Programmable Network Manager and Prime Infrastructure Arbitrary File Download Vulnerability
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM and Cisco Prime Infrastructure could allow an authenticated, low-privileged, remote attacker to retrieve arbitrary files from the underlying file system on an affected device. This vulnerabili...
ROS-20250806-13
Golang programming language vulnerability is related to improper input validation. Exploitation exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code A vulnerability in the crypto-elliptic component of the Golang programming language is related to the...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An input validation type vulnerability exists in the Huawei HarmonyOS home screen module, which can be exploited by an attacker to cause the usability to be...
CVE-2025-7674 navify Monitoring API input validation
Improper Input Validation vulnerability in Roche Diagnostics navify Monitoring allows an attacker to manipulate input data, which may lead to a denial of service DoS due to negatively impacting the server's performance. This vulnerability has no impact on data confidentiality or integrity. This...
golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
GHSA-6V2P-P543-PHR9 golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CVE-2025-7378
ASUSTOR ADM CVE-2025-7378 is an improper input validation vulnerability affecting ADM versions 4.1 through 4.3.1.R5A0, allowing arbitrary values to be injected into the NAS configuration file and potentially causing misconfiguration and unexpected NAS behavior. The issue is mitigated by updating ...
CVE-2025-3777 Improper Input Validation in huggingface/transformers
Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the imageutils.py file. The vulnerability arises from insecure URL validation using the startswith method, which can be bypassed through URL username injection. This allows attackers to...
PT-2025-26639
Name of the Vulnerable Software and Affected Versions: pbkdf2 versions =3.1.2 Description: The issue is related to an Improper Input Validation vulnerability in pbkdf2, allowing Signature Spoofing by Improper Validation. Recommendations: For versions =3.1.2, update to a version greater than 3.1.2...
CVE-2025-49081
CVE-2025-49081 is an input-validation flaw in the warehouse component of Absolute Secure Access, prior to server version 13.55. Attackers with system administrator privileges can impair the availability of the Secure Access administrative UI by sending invalid data over the network. No confidenti...
