BIT-MINIO-2025-62506 MinIO vulnerable to privilege escalation via session policy bypass in service accounts and STS

MinIO is a high-performance object storage system. In all versions prior to RELEASE.2025-10-15T17-29-55Z, a privilege escalation vulnerability allows service accounts and STS Security Token Service accounts with restricted session policies to bypass their inline policy restrictions when performin...

ZenML Input Validation Error Vulnerability

ZenML is an extensible open source MLOps framework from ZenML Open Source for creating portable, production-ready machine learning pipelines. An input validation error vulnerability exists in ZenML version 0.83.1, which stems from the failure of the PathMaterializer class to effectively detect...

ImageMagick input validation vulnerability

ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert or write images in many formats. An input validation error vulnerability exists in ImageMagick versions prior to 7.1.2-7 and prior to 6.9.13-32, which stems from an integer overflow...

Adobe Dimension Input Validation Error Vulnerability (CNVD-2025-24213)

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. An input validation error vulnerability exists in Adobe Dimension, which can be exploited by an attacker to cause arbitrary code execution in the current user environment...

CVE-2025-39969: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

Microsoft Windows Error Reporting: Input validation error vulnerability

Microsoft Windows Error Reporting WER is a component of Microsoft, Inc. enables users to notify Microsoft of application failures, kernel failures, unresponsive applications, and other application-specific issues. An input validation error vulnerability exists in Microsoft Windows Error Reporting...

Microsoft Exchange Server input validation vulnerability

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by attackers...

Adobe Substance3D Stager has a vulnerability in input validation.

Adobe Substance3D Stager is a set and rendering software for 3D scenes from Audobee Adobe USA. An input validation error vulnerability exists in Adobe Substance3D Stager 3.1.4 and prior versions, which stems from an integer overflow or wrap-around error that could lead to the execution of arbitra...

Adobe Dimension input validation error vulnerability

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. An input validation error vulnerability exists in Adobe Dimension, which can be exploited by an attacker to cause arbitrary code execution in the current user environment...

Microsoft JDBC Driver input validation vulnerability

Microsoft JDBC Driver is a SQL Server database connection driver from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft JDBC Driver, which can be exploited by an attacker to perform a spoofing attack...

Microsoft Windows Input Validation Vulnerability

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. Microsoft Windows suffers from an input validation error vulnerability that stems from an attacker's ability to elevate privileges by exploiting the vulnerability...

Microsoft SharePoint input validation vulnerability

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

Adobe Substance3D Stager has a vulnerability in input validation.

Adobe Substance3D Stager is a set and rendering software for 3D scenes from Audobee Adobe USA. An input validation error vulnerability exists in Adobe Substance3D Stager 3.1.4 and prior versions, which stems from an integer overflow or wrap-around error that could lead to the execution of arbitra...

CVE-2025-2140: Origin Validation Error

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data...

EUVD-2025-33400

An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...

CVE-2025-59957

An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...

CVE-2025-59957

An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...

CVE-2025-59957: Origin Validation Error

An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...

Qualcomm Chipsets: Input validation error vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from processing hypervisor logs that could lead to information disclosure...

Qualcomm Chipsets: Input validation error vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when handling user buffers...