209789 matches found
PUB-A-463368136
In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-84080
Improper Input Validation vulnerability in ash-project ash typescript allows a remote attacker to submit argument values outside a declared allowlist or bound on typed-controller routes. AshTypescript.TypedController.RequestHandler in lib/ash typescript/typed controller/request handler.ex calls...
PT-2026-84090
Improper Validation of Specified Type of Input vulnerability in ash-project ash lets an attacker confuse the stored type tag of an Ash.Type.Union value that uses storage: :map with tag, bypassing that member's validation and any tag-based authorization. For a union with storage: :map with tag, ea...
ROS-20260901-73-0029
The vulnerability in the incus is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
PT-2026-84087
Improper Input Validation vulnerability in ash-project ash allows an attacker to persistently deny reads of a record by storing a non-version-7 UUID in an Ash.Type.UUIDv7 attribute. Ash.Type.UUIDv7.cast input/2 accepts any well-formed UUID string, including non-version-7 UUIDs, and stores it as a...
PUB-A-511630167
In smmudetachdevnested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
NRF RegisterNFInstance handler of Unauthorized Access
The vulnerability of the NRF RegisterNFInstance handler in the software for fifth-generation mobile communication networks 5G, free5GC, is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected informati...
input-remapper.service Injection
The vulnerability of the input-remapper.service service, a device management tool for input devices, is related to the lack of authentication. Exploiting this vulnerability allows an attacker to switch the service to a specified configuration directory and activate the mechanism for injecting...
ASB-A-397216638
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-84256
Name of the Vulnerable Software and Affected Versions Erlang/OTP versions 21.0 through 27.3.4.16 Erlang/OTP versions 28.0 through 28.5.0.5 Erlang/OTP versions 29.0 through 29.0.5 stdlib versions 3.5 through 6.2.2.4 stdlib versions 7.0 through 7.3.0.1 stdlib versions 8.0 through 8.0.3 Description...
PUB-A-467351933
In Cellular Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-510136422
In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
ASB-A-529876547
In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
RockyLinux 9 : iperf3 (RLSA-2026:61389)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:61389 advisory. iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion CVE-2026-71217 Tenable has...
openSUSE 16 Security Update : rav1e (openSUSE-SU-2026:21681-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21681-1 advisory. This update for rav1e fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted log input can allow ANSI escape sequence injection and...
PUB-A-508747905
In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-40267
decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input...
decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input
Impact An attacker who can supply input to decodeUriComponent directly or via a dependency that uses this package on URL/query/path data can cause excessive CPU usage and application unresponsiveness. This is an availability issue; there is no known memory corruption, data disclosure, or remote...
GHSA-VCC3-GHJQ-M6FR decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input
Impact An attacker who can supply input to decodeUriComponent directly or via a dependency that uses this package on URL/query/path data can cause excessive CPU usage and application unresponsiveness. This is an availability issue; there is no known memory corruption, data disclosure, or remote...
NPM: decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input
NPM: decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input vulnerability discovered by ? in WordPress Npm decode-uri-component versions = 0.4.2...