3678 matches found
JLSEC-2025-52 `xmltok_impl.c` in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...
xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context...
CVE-2025-31995
HCL Unica MaxAI Workbench is vulnerable to improper input validation. This allows attackers to exploit vulnerabilities such as SQL Injection, XSS, or command injection, leading to unauthorized access or data breaches, etc...
EUVD-2025-33854
The WidgetPack Comment System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.1. This is due to missing or incorrect nonce validation on the wpcmtsync action in the wpcmtrequesthandler function. This makes it possible for unauthenticated...
WordPress plugin CM Registration has a vulnerability in input validation.
WordPress CM Registration plugin is a WordPress plugin for optimizing the user login and registration experience, supporting AJAX login/registration page, invitation code registration, multi-user role assignment and other functions. The WordPress CM Registration plugin suffers from an open redire...
Code-Projects Computer Laboratory System Security Vulnerabilities
Computer Laboratory System is a computer laboratory system. The Computer Laboratory System suffers from a SQL injection vulnerability that originates from a lack of validation of an externally entered SQL statement in the password field of the login page, which can be exploited by an attacker to...
CVE-2025-43296
A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeeper checks...
CVE-2025-43296
A logic issue in macOS versions prior to Tahoe 26 stems from insufficient validation , which could allow an application to bypass Gatekeeper checks . This vulnerability has been addressed with improved validation in macOS Tahoe 26 . Users are recommended to update to macOS Tahoe 26 or later to re...
CVE-2025-36171
IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly validated API input due to excessive resource consumption...
New API code issue vulnerabilities
New API is a QuantumNous open source interface software. A code issue vulnerability exists in New API versions prior to 0.9.0.5 that stems from not properly validating a user-supplied URL, which could lead to a server-side request forgery attack...
EUVD-2019-2390
Malware in sbrugna...
EUVD-2010-2236
Malware in sbrugna...
EUVD-2017-6391
Malware in sbrugna...
EUVD-2019-19077
Malware in sbrugna...
EUVD-2010-1219
Malware in sbrugna...
EUVD-2019-10509
Malware in sbrugna...
EUVD-2018-18376
Malware in sbrugna...
EUVD-2007-5774
Malware in sbrugna...
EUVD-2021-25422
Malware in sbrugna...