Lucene search
+L

88892 matches found

Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•25 views

PT-2026-44623

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216 Description Insufficient validation of untrusted input in ANGLE allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS5.9AI score0.00523EPSS
SaveExploits2References156
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•22 views

PT-2026-43644

Improper Validation of Specified Quantity in Input vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded allows Input Data Manipulation.This issue affects Ads by WPQuads: from n/a through = 3.0.2...

6.5CVSS5.8AI score0.00351EPSS
SaveExploits0References2
Redos
Redos
•added 2026/05/27 12:00 a.m.•26 views

ROS-20260527-73-0001

A vulnerability in the hi311x component of the Linux kernel is related to buffer copying without input validation. Exploitation of the vulnerability could allow a remote attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service via a malicious package...

7.8CVSS7.4AI score0.00176EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•26 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a vulnerability related to input validation. This vulnerability stemmed from insufficient validation of untrusted inputs by the WebGL component, which could allow a remote attacker...

8.3CVSS5.9AI score0.00324EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/05/27 12:00 a.m.•13 views

The vulnerability of the Valkey data structure server, related to insufficient validation of input data, allows attackers to cause service failures.

The vulnerability of the Valkey data structure server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS5.8AI score0.00654EPSS
SaveExploits0References3Affected Software2
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•20 views

PT-2026-44690

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216 Description Insufficient validation of untrusted input in ANGLE Almost Native Graphics Layer Engine allows a remote attacker who has compromised the renderer process to potentially perform a sandb...

9.6CVSS5.8AI score0.00523EPSS
SaveExploits4References157
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•24 views

Cinny 输入验证错误漏洞

Cinny is a simple and secure instant messaging client developed by Cinny OpenSource. Versions of Cinny prior to 4.10.3 contained a vulnerability related to input validation errors. This vulnerability arose due to EmojiBoard using an untrusted pack.meta.avatar as a URL without validation, and...

7.1CVSS5.8AI score0.00484EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•2 views

CVE-2026-42553: Improper Input Validation

Cinny is a Matrix client. Prior to 4.10.3, A remote authenticated attacker who shares a room with a victim and has permissions to create room emotes for example in a DM can cause the victim's client to send their Matrix access token to an attacker-controlled server. This occurs when the victim...

7.1CVSS6AI score0.00484EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•1 views

CVE-2026-42459: Improper Input Validation

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the free5GC UDM component fails to validate the supi path parameter in six GET handlers of the nudm-sdm Subscriber Data Management service. An unauthenticated attacker can inject control characters into the SUPI...

8.7CVSS5.9AI score0.00448EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•2 views

CVE-2026-48922: Improper Input Validation

Jenkins Credentials Binding Plugin 720.v3f6decef43ea and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to a job to write files to arbitrary locations on the node filesystem, which can lead to remote code execution i...

7.5CVSS6.4AI score0.00584EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•23 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a vulnerability related to input validation. This vulnerability stemmed from insufficient validation for untrusted inputs in the Password module, which could allow remote attackers ...

6.5CVSS5.9AI score0.00164EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•25 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a vulnerability related to input validation. This vulnerability stemmed from insufficient validation of untrusted inputs during USB communication, which could allow remote attackers...

8.8CVSS6.2AI score0.00234EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•16 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a vulnerability related to input validation. This vulnerability stemmed from insufficient input validation in Site Isolation, which could allow remote attackers to bypass site...

5CVSS5.8AI score0.002EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•23 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a vulnerability related to input validation. This vulnerability stemmed from insufficient input validation in the OptimizationGuide component, which could allow remote attackers to...

4.2CVSS5.9AI score0.00223EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•23 views

WordPress plugin Ads by WPQuads 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.7AI score0.00351EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•25 views

WordPress plugin Facebook for WooCommerce 输入验证错误漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

4.7CVSS5.8AI score0.00281EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•22 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a vulnerability related to input validation. This vulnerability stemmed from insufficient input validation in the Media component, which could allow remote attackers to obtain...

5.3CVSS5.8AI score0.00281EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•2 views

CVE-2026-45137: Improper Input Validation

Anchor is a framework providing several convenient developer tools for writing Solana programs. From 1.0.0 to before 1.0.2, an logic error causes anchor programs to accept any program id when requiring the system program id, causing false assumptions resulting in potential arbitrary cpi in progra...

8.2CVSS6.1AI score0.00378EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2026/05/27 12:00 a.m.•13 views

The vulnerability of the SAML Endpoint component of the Keycloak identity and access management software allows a attacker to trigger a service denial.

The vulnerability of the SAML Endpoint component of the Keycloak identity and access management software lies in improper syntax validation during input verification. Exploiting this vulnerability could allow an attacker to trigger a service failure...

7.8CVSS5.8AI score0.00867EPSS
SaveExploits0References7Affected Software1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•24 views

WordPress plugin Single Mailchimp 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.8AI score0.00321EPSS
SaveExploits0References3
Rows per page
Query Builder