Lucene search
+L

18082 matches found

Cvelist
Cvelist
•added 2026/09/08 12:12 a.m.•61 views

CVE-2026-76967 Insecure Deserialization in SAP NetWeaver Business Client

SAP NetWeaver Business Client does not perform sufficient validation when processing certain locally stored data during application startup. An attacker with low privileges on the local system could replace this data with specially crafted content. When the application is next launched, the craft...

7.8CVSS0.0036EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-88690

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in the Passwords component allows a remote attacker to potentially leak sensitive information through the use of crafted network traffic. Recommendations Updat...

9.6CVSS6.4AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•15 views

PT-2026-88668

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in Chromium allows a remote attacker who has compromised the renderer process to spoof UI elements through the use of crafted network traffic. Recommendations...

9.6CVSS6.5AI score0.00573EPSS
SaveExploits11References241
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-75991: Improper Input Validation

Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim mus...

8.6CVSS8.6AI score0.00301EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-87108

Name of the Vulnerable Software and Affected Versions PayTR Virtual Pos iFrame API WHMCS Module versions 9.0.0 through 9.0.2 Description Improper validation of the specified quantity in the input allows for input data manipulation within the PayTR Virtual Pos iFrame API WHMCS Module...

7.5CVSS5.6AI score0.00324EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•24 views

PT-2026-88308

Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description An improper input validation issue allows a low-privileged attacker to execute arbitrary code in the context of the current user. Exploitation requires user interaction, specifically...

8.4CVSS8AI score0.00471EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•19 views

PT-2026-88254

In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.00331EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•3 views

CVE-2026-55256: Improper Input Validation

In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.5CVSS5.9AI score0.00331EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•4 views

CVE-2026-28613: Improper Input Validation

In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.3CVSS6AI score0.00095EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-45525: Improper Input Validation

In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS5.9AI score0.00092EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•9 views

CVE-2026-75999: Improper Input Validation

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative...

8.4CVSS8.4AI score0.00471EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•14 views

PT-2026-88572

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in FedCM Federated Credential Management, an API that allows users to sign into websites using their existing accounts from other providers allows a remote...

9.6CVSS6.5AI score0.00573EPSS
SaveExploits11References241
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•7 views

CVE-2026-75726: Improper Input Validation

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue require...

3.5CVSS5.9AI score0.00537EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•21 views

PT-2026-88410

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue require...

3.5CVSS5.9AI score0.00537EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-88255

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Improper input validation in the AppendCommentLine function within AnnotationProcessor.cpp creates a supply chain risk. This flaw allows for local escalation of...

7.8CVSS5.8AI score0.00096EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-88304

Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim mus...

8.6CVSS8.6AI score0.00301EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-28638: Improper Input Validation

In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS6AI score0.00092EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•13 views

PT-2026-88569

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in Extensions allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can...

9.6CVSS6.6AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•16 views

PT-2026-88610

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in the FileAPI allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted...

9.6CVSS7.2AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-88653

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in SiteIsolation allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted...

9.6CVSS7.2AI score0.00573EPSS
SaveExploits11References241
Rows per page
Query Builder