Lucene search
+L

77690 matches found

Positive Technologies
Positive Technologies
added 2026/07/06 12:00 a.m.21 views

PT-2026-55904

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description An injection issue exists in the Apache Camel IRC component due to improper input validation and...

6.5CVSS6.2AI score0.00675EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/07/06 12:00 a.m.30 views

PT-2026-55898

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Vertx Websocket component. The camel-vertx-websocket consumer mapped inbound WebSocket query and path parameters into the Camel Exchange header...

6AI score0.00857EPSS
SaveExploits1References2
NVD
NVD
added 2026/07/05 1:16 p.m.33 views

CVE-2026-59509

An unauthenticated improper input validation vulnerability in the POST /fetchcvedata endpoint in cve-search. A remote attacker can manipulate request parameters controlling the MongoDB collection, projected fields, and regular-expression filters to read arbitrary application MongoDB collections...

9.2CVSS0.00542EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/05 12:02 p.m.11 views

CVE-2026-59509

An unauthenticated improper input validation vulnerability in the POST /fetchcvedata endpoint in cve-search. A remote attacker can manipulate request parameters controlling the MongoDB collection, projected fields, and regular-expression filters to read arbitrary application MongoDB collections...

9.2CVSS6.2AI score0.00542EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/07/05 12:02 p.m.32 views

EUVD-2026-41753

An unauthenticated improper input validation vulnerability in the POST /fetchcvedata endpoint in cve-search. A remote attacker can manipulate request parameters controlling the MongoDB collection, projected fields, and regular-expression filters to read arbitrary application MongoDB collections...

9.2CVSS6.2AI score0.00542EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/05 12:00 a.m.41 views

PT-2026-55794

Name of the Vulnerable Software and Affected Versions cve-search affected versions not specified Description An unauthenticated improper input validation issue exists in the 'POST /fetch cve data' endpoint. A remote attacker can manipulate request parameters that control the MongoDB collection,...

9.2CVSS6.1AI score0.00542EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/07/04 1:16 a.m.159 views

Exploit for Improper Input Validation in Microsoft

No d...

9.8CVSS5.9AI score0.9466EPSS
SaveExploits24
Snyk
Snyk
added 2026/07/03 10:19 p.m.10 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via insufficient validation of repository creation fields, including length-limited template fields and trust model or object format values. An attacker can submit malformed or unexpected data by providing...

9.1CVSS6AI score0.00522EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/03 10:19 p.m.11 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via insufficient validation of repository creation fields, including length-limited template fields and trust model or object format values. An attacker can submit malformed or unexpected data by providing...

9.1CVSS6AI score0.00522EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/03 10:19 p.m.10 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via insufficient validation of repository creation fields, including length-limited template fields and trust model or object format values. An attacker can submit malformed or unexpected data by providing...

9.1CVSS6AI score0.00522EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/03 9:31 p.m.5 views

GHSA-922F-HFWP-P56F Gitea repository creation accepts insufficiently validated fields

Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited template fields and trust model or object format values...

9.1CVSS5.9AI score0.00522EPSS
SaveExploits0References8
NVD
NVD
added 2026/07/03 9:17 p.m.22 views

CVE-2026-58292

Improper input validation in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

7.5CVSS0.00483EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/03 9:17 p.m.15 views

CVE-2026-57985

Improper input validation in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

8.8CVSS0.0072EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/03 8:35 p.m.16 views

CVE-2026-58292

Improper input validation in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

7.5CVSS6.1AI score0.00483EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/07/03 8:35 p.m.19 views

EUVD-2026-41650

Improper input validation in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

7.6CVSS6.1AI score0.0072EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/03 8:35 p.m.11 views

CVE-2026-57985

Improper input validation in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

7.6CVSS6.1AI score0.0072EPSS
SaveExploits0References2Affected Software1
Snyk
Snyk
added 2026/07/03 7:13 p.m.12 views

Improper Input Validation

Overview org.webjars.npm:webpack-dev-server is an Uses webpack with a development server that provides live reloading. It should be used for development only. Affected versions of this package are vulnerable to Improper Input Validation through the host-validation process. An attacker can cause t...

6.9CVSS6AI score0.00517EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/03 7:13 p.m.12 views

Improper Input Validation

Overview webpack-dev-server is an Uses webpack with a development server that provides live reloading. It should be used for development only. Affected versions of this package are vulnerable to Improper Input Validation through the host-validation process. An attacker can cause the server to...

6.9CVSS6AI score0.00517EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2026/07/03 2:00 p.m.152 views

Chromium: CVE-2026-14131 Insufficient validation of untrusted input in WebAppInstalls

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

5.4CVSS5.9AI score0.00218EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/07/03 2:00 p.m.23 views

Chromium: CVE-2026-13797 Insufficient validation of untrusted input in Chromecast

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

9.6CVSS5.9AI score0.00319EPSS
SaveExploits0
Rows per page
Query Builder