6059 matches found
CVE-2026-42031-SQL-Injection-Scanner
🛡️ Escáner CVE-2026-42031 Escáner de Inyección SQL para CKAN DataStore Esta herramienta se utiliza para detectar y validar la vulnerabilidad CVE-2026-42031 Inyección SQL en la plataforma CKAN DataStore. 📋 Características ✅ 8 Consultas de Validación automáticas base de datos, tablas, columnas, etc...
CVE-2026-47834
A flaw was found in Spring Data JPA. This vulnerability allows a remote attacker to bypass data validation mechanisms by submitting specially crafted input. This could lead to unauthorized access to limited information and minor disruptions in service availability. Mitigation There is no mitigati...
CVE-2026-56724
The web-based open source helpdesk system Zammad is vulnerable to a permission check flaw in the knowledge base management area prior to version 7.0.2 . Due to incomplete data validation for linked items, users with limited read permissions could potentially interact with items outside their assi...
CVE-2026-56724 Zammad: Incorrect implementation of permission checks in the knowledge base module
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An issue with permission checks in the knowledge base management area has been identified. Under certain conditions, data validation for linked items was not fully enforced. This could have allowed users...
ROS-20260915-73-0055
The vulnerability of the Reading Mode in Microsoft Edge and Google Chrome browsers is related to insufficient validation of entered data. Exploiting this vulnerability can allow a remote attacker to bypass the sandbox’s security mechanisms...
Astra Linux – Vulnerability in Chromium
Insufficient data validation in the File System API of Google Chrome prior to version 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicious network traffic...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: i2c: validation of user data in compact ioctl commands. Incorrect user data may cause warnings in i2ctransfer. For example, it may result in no messages being sent at all. Userspace should not be able to trigger such warnings...
Astra Linux – Vulnerability in Chromium
Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out-of-bounds memory access via a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Insufficient data validation in the new tab page of Google Chrome prior to version 96.0.4664.93 allowed a remote attacker to leak cross-origin data through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Insufficient data validation in Mojo in Google Chrome prior to version 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Insufficient data validation in Mojo in Google Chrome prior to version 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Insufficient data validation in the Updater component of Google Chrome prior to version 120.0.6099.62 allowed a remote attacker to perform OS-level privilege escalation through a malicious file. Chromium security severity: High...
EUVD-2026-76525
In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid empty mapping pairs Reject an attribute with empty mapping pairs if it has inconsistent highest VCN and size...
jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution
A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the...
PT-2026-89493
OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary commands as root, due to insufficient validation of feed-supplied rule data. The vulnerability affects versions of the...
CVE-2026-76967
SAP NetWeaver Business Client is affected by an insecure deserialization vulnerability (CVE-2026-76967). The application fails to sufficiently validate certain locally stored data processed at startup. A low-privilege local attacker can replace this data with specially crafted content, which, upo...
PT-2026-86779
PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, allowing uncapped values to exceed the 32767 byte TAG String limit. Attackers can submit oversized skin data fields like skinID or geometryName to trigger exceptions during NBT dat...