Lucene search
+L

5394 matches found

CNVD
CNVD
added 2025/05/07 12:0 a.m.33 views

Apache Tomcat Input Validation Error Vulnerability (CNVD-2025-10031)

Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server . Used to implement the Servlet and JavaServer Page JSP support. An input validation error vulnerability exists in Apache Tomcat that stems from improperly neutralizing escape, meta, or control...

9.8CVSS7AI score0.04047EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/05/07 12:0 a.m.7 views

WordPress plugin WP Gravity Forms Dynamics CRM 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation...

4.7CVSS6AI score0.00309EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/07 12:0 a.m.8 views

insa-auth 输入验证错误漏洞

insa-auth is an authentication service tool from genda open source. An input validation error vulnerability exists in insa-auth, which originates from a third-party website that has access to a server-assisted authentication bridge and may disclose basic information...

5.3CVSS6.7AI score0.0049EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/06 7:11 p.m.18 views

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in axios

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of axios Vulnerability Details CVEID:CVE-2024-57965 DESCRIPTION: In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwanted setAttribute'href',hr...

9.8CVSS7.9AI score0.00376EPSS
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
added 2025/05/06 4:44 p.m.12 views

@misskey-dev/summaly allows IP Filter Bypass via Redirect

Summary Due to a validation error in got.scpaping, it is possible to use an HTTP redirect to avoid IP filtering. Details In got.scpaping, Summaly first makes a HTTP HEAD request to the page being summarized. It then preforms private IP address checks on the HEAD response, then makes an additional...

6.4AI score
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2025/05/06 12:0 a.m.7 views

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from a lack of memory requirement checking when calling IOCTL from user space to the camera kernel driver, which could lead to memory corruptio...

7.8CVSS6.6AI score0.00108EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/06 12:0 a.m.10 views

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that originates during the FRS UDS generation process and could lead to memory corruption...

7.8CVSS6.5AI score0.001EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/06 12:0 a.m.10 views

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets suffer from an input validation error vulnerability that stems from a memory corruption in the Camera kernel when a large number of devices are attached to user space...

7.8CVSS6.8AI score0.00108EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/06 12:0 a.m.7 views

PT-2025-20008 · Npm · @Misskey-Dev/Summaly

Summary Due to a validation error in got.scpaping, it is possible to use an HTTP redirect to avoid IP filtering. Details In got.scpaping, Summaly first makes a HTTP HEAD request to the page being summarized. It then preforms private IP address checks on the HEAD response, then makes an additional...

5.3CVSS6.5AI score
SaveExploits0References4
CNNVD
CNNVD
added 2025/05/06 12:0 a.m.5 views

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption during command buffer processing in the OPE module...

7.8CVSS7.2AI score0.00108EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/06 12:0 a.m.7 views

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets suffer from an input validation error vulnerability that originates when a command is triggered in the PlayReady Trusted application, which could result in memory corruption...

7.8CVSS6.9AI score0.001EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/06 12:0 a.m.8 views

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets, which originates from a Camera kernel driver memory corruption during a user-space call to IOCTL to dump request information...

7.8CVSS6.8AI score0.00108EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/06 12:0 a.m.8 views

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets, which stems from the fact that the value of a Guest VM-controlled buffer can be persistently modified while processing a message, potentially leading to...

7.8CVSS6.9AI score0.001EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/01 5:5 p.m.11 views

Security Bulletin: Security Vulnerabilities in node.js packages affect IBM Voice Gateway

Summary Security Vulnerabilities in node.js packages affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2024-57965 DESCRIPTION: In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a...

9.8CVSS7.1AI score0.00763EPSS
SaveExploits1Affected Software1
CNNVD
CNNVD
added 2025/05/01 12:0 a.m.8 views

Tenda RX2 Pro 安全漏洞

Tenda RX2 Pro is a high performance WiFi 6 signal amplifier from Tenda China. The Tenda RX2 Pro suffers from an input validation error vulnerability that stems from a lack of input validation in the setLanCfg API endpoint, which can be exploited by an attacker to gain root shell access...

8.8CVSS7.2AI score0.00806EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/05/01 12:0 a.m.7 views

Tenda RX2 Pro 安全漏洞

Tenda RX2 Pro is a high performance WiFi 6 signal amplifier from Tenda China. The Tenda RX2 Pro suffers from an input validation error vulnerability that stems from a lack of input validation in the ate management service, no details of the vulnerability are provided at this time...

7.3CVSS7AI score0.00964EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/05/01 12:0 a.m.13 views

IBM Db2 输入验证错误漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system executes on UNIX, Linux, IBMi, z/OS, and Windows server versions. An input validation error vulnerability exists in IBM Db2 versions 12.1.0 and 12.1.1, which stems from the possibility that the...

7.5CVSS6.2AI score0.00332EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/30 12:0 a.m.5 views

Microsoft Dynamics 输入验证错误漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. An input validation error vulnerability exists in Microsoft Dynamics, which stems from...

8.1CVSS6.1AI score0.01275EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/30 12:0 a.m.9 views

Tesla Model S 输入验证错误漏洞

The Tesla Model S is an automobile from the American company Tesla, Inc. An input validation error vulnerability exists in Tesla Model S. The vulnerability stems from improper input validation and could cause a local user to escape the sandbox...

7.8CVSS7.3AI score0.00169EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/27 3:4 p.m.31 views

CVE-2025-46433

In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possible...

9.8CVSS7.2AI score0.00523EPSS
SaveExploits0References1
Rows per page
Query Builder