209240 matches found
VulnCheck KEV: CVE-2023-37569
This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system. Successful exploitation of this vulnerability could allow the attacker ...
Debian dsa-6488 : jbig2dec - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6488 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6488-1 [email protected] https://www.debian.org/security/ Moritz...
TencentOS Server 4: iperf3 (TSSA-2026:0958)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0958 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
PT-2026-86990
Name of the Vulnerable Software and Affected Versions Easy Appointments versions prior to 4.0.2.2 Description Insufficient input sanitization and output escaping lead to DOM-Based and Stored Cross-Site Scripting XSS, a condition where arbitrary web scripts are injected into pages and executed whe...
PT-2026-86772
PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. Attackers can send crafted item IDs outside the valid range to trigger an uncaught exception that crashes the server...
PT-2026-86596
In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232...
ROS-20260907-73-0082
The vulnerability of the XmlCli function in Intel UEFI microprocessors is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
ROS-20260907-73-0075
The vulnerability of the CseVariableStorageSmm module in Intel UEFI microprocessors is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
ROS-20260907-73-0079
The vulnerability of Intel UEFI microprogramming systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
ROS-20260907-73-0077
The vulnerability of UEFI microprogramming systems of Intel processors is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
ROS-20260907-73-0089
The vulnerability in dotnet9.0 is related to the lack of validation for input data during cyclic operations. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-20500: Improper Certificate Validation
In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232...
Linux Distros Unpatched Vulnerability : CVE-2026-80882
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Ensure the ENOMEM...
PT-2026-86933
Name of the Vulnerable Software and Affected Versions knowns versions prior to 0.30.0 Description Failure to validate the settings.lsp.languages binary field in project configuration files allows the execution of arbitrary binaries. An attacker can achieve this by crafting a malicious...
ROS-20260907-73-0091
The vulnerability in dotnet8.0 is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260907-73-0092
The vulnerability in dotnet10.0 is related to the lack of validation for input data during cyclic operations. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-86608
In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245...
PT-2026-86779
PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, allowing uncapped values to exceed the 32767 byte TAG String limit. Attackers can submit oversized skin data fields like skinID or geometryName to trigger exceptions during NBT dat...
CVE-2026-86287: Improper Validation of Specified Type of Input
Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...