88921 matches found
Joomla! CMS 路径遍历漏洞
Joomla! CMS is a content management system developed under the open source Joomla! framework. The Joomla! CMS has a path traversal vulnerability, which stems from improper validation of search parameters in the commedia file API endpoints, potentially leading to path traversal attacks...
CVE-2026-45721: Improper Input Validation
Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is asked for any URL path that resolves to a directory without an index file, DirPage walks upward through parent directories — past the configured server root — looking for a file named handler.lua to execute a...
CVE-2025-33221: Improper Input Validation
NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service...
PT-2026-48578
Уязвимость обучающей платформы IQ SCHOOL связана с недостатками проверки вводимых пользователем данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить хэши паролей других пользователей...
The vulnerability of the Prisma SD-WAN ION network management tool, related to the lack of input data verification for cyclic operations, allows a attacker to trigger a service failure.
The vulnerability of the Prisma SD-WAN ION network management tool is related to the lack of validation for input data during cyclical operations. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the bson_validate() function in the MongoDB database management system allows a hacker to trigger a service failure.
The vulnerability of the bsonvalidate function in the MongoDB database management system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...
PT-2026-43071
Name of the Vulnerable Software and Affected Versions hackney versions 0 through 4.0.0 Description Improper Neutralization of CRLF Sequences allows HTTP Request Splitting. The software fails to percent-encode carriage return r or line feed characters in the URL query component before constructing...
The vulnerability of the webbrowser.open() function in the CPython interpreter allows a hacker to trigger a service failure.
The vulnerability of the webbrowser.open function in the CPython interpreter is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2026-9277
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - shell-quote's quote function did not validate object-token inputs against the operator model used by parse. The .op field was backslash-escaped character by...
SPIP 输入验证错误漏洞
SPIP is an open-source software developed by SPIP for creating Internet websites. Versions of SPIP prior to 4.4.15 had a vulnerability related to input validation errors, which stemmed from an open-redirecting vulnerability in the action/cookie.php file within ecrire...
CVE-2026-33000
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection...
CVE-2026-34910
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection...
Improper Input Validation
com.ibeetl:beetl-spring-classic is vulnerable to Improper Input Validation. The vulnerability is due to improper neutralization of special elements in expression language statements within the SpELFunction component, which allows an attacker to inject and execute malicious expressions remotely...
CVE-2026-35433
A flaw was found in dotnet. Improper input validation and an integer overflow in .NET allow an unauthenticated attacker to elevate privileges locally. Mitigation Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example...
CVE-2026-40411
Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network...
CVE-2026-26147
Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network...
EUVD-2026-31516
Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network...
CVE-2026-26147
Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network...