3525 matches found
CRM Platform Path Traversal DoS
The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...
YouGile Project Management Service Unauthorized Access
The vulnerability of the YouGile project management service is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Bestechnic BES2300 Bluetooth Audio SoC Buffer Overflow DoS
The vulnerability of the l2caphandledata function in the microprogramming-based audio chipset of Bestechnic BES2300 Bluetooth Audio SoC is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially...
Test IT SSRF
The vulnerability of the Test IT testing management system is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...
chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia
An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496526419...
chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia
An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513948227...
chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia
An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520571816...
chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia
An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496565479...
chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia
An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516915337...
chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia
An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516457532...
chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia
An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501483855...
CVE-2024-41713POC
CVE-2024-41713POC Mitel MiCollab Enterprise Collaboration Platform Arbitrary File Read Vulnerability CVE-2024-41713 Due to an authentication bypass vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab software, and insufficient input validation, an unauthenticated remote...
CVE-2022-40471
CVE-2022-40471 – CPMS Authenticated File Upload RCE 📌 Overview CVE-2022-40471 is an authenticated Remote Code Execution vulnerability affecting Clinic's Patient Management System CPMS. The vulnerability exists due to insufficient validation of uploaded files in the user profile image upload...
Mlflow < 2.11.0 - Path Traversal
A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '' character can be used to insert a path into the fragment, effectively...
Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect
The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2024-0250...
Travelpayouts <= 1.1.16 - Open Redirect
The plugin is vulnerable to Open Redirect due to insufficient validation on the travelpayoutsredirect variable. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2024-0337...
CVE-2026-14382
CVE-2026-14382 Bin trigger Bug fix $250000492218546 High CVE-2026-14382: Insufficient validation of untrusted input in ANGLE. Reported by anonymous on 2026-03-13 The root cause of this vulnerability appears to be similar to that of CVE-2025-6558. Based on my current analysis, I suspect that it ma...
swagger-ui
Introduction: The Role of Swagger UI Swagger UI is a widely used library that renders OpenAPI formerly Swagger specifications into an interactive web interface. It enables developers and integrators to explore and test APIs without having the backend implementation in place. CVE‑2018‑25031 Detail...
CVE-2023-39115
CVE-2023-39115 Description: Campcodes Online Matrimonial Website System Script v3.3 is vulnerable to an arbitrary file upload vulnerability, potentially allowing attackers to execute arbitrary code on the targeted server. The vulnerability arises from insufficient validation of uploaded files,...