Lucene search
+L

6060 matches found

CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•17 views

Microsoft SharePoint input validation vulnerability

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing work, collaborating with others, organizing projects and workgroups, and searching for people and information. An input validation erro...

7.8CVSS7.3AI score0.00794EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•19 views

Adobe Dreamweaver Desktop: Input validation error vulnerability

Adobe Dreamweaver Desktop is a web design and development software from Adobe. An input validation error vulnerability exists in Adobe Dreamweaver Desktop 21.6 and prior versions that stems from improper input validation and could lead to the execution of arbitrary code...

8.6CVSS8AI score0.00253EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•22 views

Microsoft Windows Input Validation Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from an input validation error vulnerability. An attacker could exploit this vulnerability to remotely execute code. The following products and editions are...

8.1CVSS7.6AI score0.01116EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•20 views

Adobe Dreamweaver Desktop: Input validation error vulnerability

Adobe Dreamweaver Desktop is a web design and development software from Adobe. An input validation error vulnerability exists in Adobe Dreamweaver Desktop 21.6 and prior versions, which stems from improper input validation and could lead to arbitrary file system writes...

8.6CVSS7.9AI score0.00234EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•18 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to account for the size of the null terminator when validating extended attribute buffers, which...

6.7AI score0.00447EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/12 12:00 a.m.•5 views

CVE-2026-22794: Origin Validation Error

Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.93, the server uses the Origin value from the request headers as the email link baseUrl without validation. If an attacker controls the Origin, password reset / email verification links in emails can be...

9.6CVSS6.2AI score0.00386EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:28 a.m.•25 views

CVE-2021-33738

A vulnerability has been identified in JT2Go All versions V13.2.0.2, Teamcenter Visualization All versions V13.2.0.2. The plmxmlAdapterSE70.dll library in affected applications lacks proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds read past th...

4.3CVSS5AI score0.01343EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:08 a.m.•22 views

CVE-2016-9022

Exponent CMS before 2.6.0 has improper input validation in usersController.php...

9.8CVSS8.1AI score0.01291EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:27 a.m.•23 views

CVE-2023-45150

Nextcloud calendar is a calendar app for the Nextcloud server platform. Due to missing precondition checks the server was trying to validate strings of any length as email addresses even when megabytes of data were provided, eventually making the server busy and unresponsive. It is recommended th...

4.3CVSS5.6AI score0.00477EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:21 a.m.•30 views

CVE-2021-27620

SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method Ups::AddPart which will trigger an...

5.9CVSS6.9AI score0.01208EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/01/08 4:34 p.m.•17 views

Security Bulletin: IBM Storage Ceph is vulnerable to an Origin Validation Error in Grafana (CVE-2024-57965)

Summary Axios is a dependency of Grafana, and Grafana is used by IBM Storage Ceph as a metrics dashboard. This bulletin identifies the steps to take to address the vulnerability in Grafana. CVE-2024-57965 Vulnerability Details CVEID:CVE-2024-57965 DESCRIPTION: In axios before 1.7.8,...

9.8CVSS7.2AI score0.00383EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/08 3:41 a.m.•27 views

CVE-2026-20893

Origin validation error issue exists in Fujitsu Security Solution AuthConductor Client Basic V2 2.0.25.0 and earlier. If this vulnerability is exploited, an attacker who can log in to the Windows system where the affected product is installed may execute arbitrary code with SYSTEM privilege and/o...

8.5CVSS7.8AI score0.00125EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•23 views

V-SOL GPON/EPON OLT Platform Cross-site Scripting Vulnerability

V-SOL GPON/EPON OLT Platform is an optical line terminal management platform from China Semiconductor V-SOL. A cross-site scripting vulnerability exists in V-SOL GPON/EPON OLT Platform version v2.03, which stems from improper input cleanup and could lead to a reflected cross-site scripting attack...

6.1CVSS5.5AI score0.00274EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•20 views

n8n Input validation error vulnerability

n8n is a scalable workflow automation tool from the n8n open source. An input validation error vulnerability exists in versions prior to n8n 1.121.0, which stems from an attacker being able to access underlying server files by executing a form-based workflow, potentially leading to the disclosure...

10CVSS8.4AI score0.78188EPSS
SaveExploits27References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•9 views

CVE-2025-67825: Origin Validation Error

An issue was discovered in Nitro PDF Pro for Windows before 14.42.0.34. In certain cases, it displays signer information from a non-verified PDF field rather than from the verified certificate subject. This could allow a document to present inconsistent signer details. The display logic was updat...

5.5CVSS5.9AI score0.00091EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/07 12:17 p.m.•26 views

CVE-2026-20893

Origin validation error issue exists in Fujitsu Security Solution AuthConductor Client Basic V2 2.0.25.0 and earlier. If this vulnerability is exploited, an attacker who can log in to the Windows system where the affected product is installed may execute arbitrary code with SYSTEM privilege and/o...

8.5CVSS0.00125EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/07 9:18 a.m.•27 views

CVE-2025-1102

A CWE-346 "Origin Validation Error" in the CORS configuration in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to affect the device confidentiality, integrity, or availability via crafted URLs or HTTP requests...

7.1CVSS6.1AI score0.00146EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/01/07 5:19 a.m.•24 views

Origin validation error vulnerability in Fujitsu Security Solution AuthConductor Client Basic V2

Overview Fujitsu Security Solution AuthConductor Client Basic V2 provided by Fujitsu Client Computing Limited contains the following vulnerability. Origin validation error CWE-346 - CVE-2026-20893 MASAHIRO IIDA of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

8.5CVSS7.8AI score0.00125EPSS
SaveExploits0References5
CVE
CVE
•added 2026/01/07 3:16 a.m.•96 views

CVE-2026-20893

Summary: CVE-2026-20893 is an origin validation error in Fujitsu Security Solution AuthConductor Client Basic V2 up to and including 2.0.25.0. The issue allows a user who can log in to the Windows system hosting the affected product to execute arbitrary code with SYSTEM privileges and/or modify r...

8.5CVSS7.7AI score0.00125EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/07 3:16 a.m.•48 views

CVE-2026-20893

Origin validation error issue exists in Fujitsu Security Solution AuthConductor Client Basic V2 2.0.25.0 and earlier. If this vulnerability is exploited, an attacker who can log in to the Windows system where the affected product is installed may execute arbitrary code with SYSTEM privilege and/o...

8.5CVSS0.00125EPSS
SaveExploits0References2
Rows per page
Query Builder