PT-2026-86930

Name of the Vulnerable Software and Affected Versions knowns versions prior to 0.30.0 Description Insufficient validation of filesystem paths in MCP tool arguments allows attackers to perform directory traversal. By supplying path arguments containing traversal sequences, an attacker can read,...

CVE-2022-51015: Improper Input Validation

PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket for STARTBREAK and CRACKBREAK actions or in UseItemTransactionData typically within InventoryTransactionPacket. A remote authenticated attacker can send crafted packets with invalid facing values e.g., negative or...

ROS-20260907-73-0086

The vulnerability of UEFI microprogramming systems of Intel processors is related to deficiencies in input data validation. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2026-86672

HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance or availability...

PT-2026-86990

Name of the Vulnerable Software and Affected Versions Easy Appointments versions prior to 4.0.2.2 Description Insufficient input sanitization and output escaping lead to DOM-Based and Stored Cross-Site Scripting XSS, a condition where arbitrary web scripts are injected into pages and executed whe...

PT-2026-86772

PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. Attackers can send crafted item IDs outside the valid range to trigger an uncaught exception that crashes the server...

PT-2026-86596

In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232...

ROS-20260907-73-0075

The vulnerability of the CseVariableStorageSmm module in Intel UEFI microprocessors is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260907-73-0079

The vulnerability of Intel UEFI microprogramming systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

ROS-20260907-73-0077

The vulnerability of UEFI microprogramming systems of Intel processors is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260907-73-0089

The vulnerability in dotnet9.0 is related to the lack of validation for input data during cyclic operations. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260907-73-0082

The vulnerability of the XmlCli function in Intel UEFI microprocessors is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2026-86670

HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security issues...

PT-2026-86933

Name of the Vulnerable Software and Affected Versions knowns versions prior to 0.30.0 Description Failure to validate the settings.lsp.languages binary field in project configuration files allows the execution of arbitrary binaries. An attacker can achieve this by crafting a malicious...

ROS-20260907-73-0091

The vulnerability in dotnet8.0 is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260907-73-0092

The vulnerability in dotnet10.0 is related to the lack of validation for input data during cyclic operations. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-86607

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246...

PT-2026-86779

PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, allowing uncapped values to exceed the 32767 byte TAG String limit. Attackers can submit oversized skin data fields like skinID or geometryName to trigger exceptions during NBT dat...

PT-2026-86608

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245...

CVE-2026-86287: Improper Validation of Specified Type of Input

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...