CVE-2025-41099

CVE-2025-41099 describes an insecure direct object reference in Bold Workplanner before version 2.5.25 (build 4935b438f9b). The issue arises from insufficient input validation, allowing an authenticated user to access the internal list of permissions using unauthorized internal identifiers, with ...

Security Bulletin: IBM InfoSphere Information Server is affected by an improper input validation vulnerability in Apache POI (CVE-2025-31672)

Summary An improper input validation vulnerability in Apache POI that is used by InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2025-31672 DESCRIPTION: Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xls...

PT-2025-39818

Name of the Vulnerable Software and Affected Versions Perfex CRM version 3.2.1 Description An HTML injection issue exists in Perfex CRM version 3.2.1. This is due to insufficient validation of user-supplied data. The issue occurs when sending a POST request to the /admin/leads/lead endpoint with...

GE UR family Improper Input Validation (CVE-2021-27420)

GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving a series of unsupported HTTP requests. When unresponsive, the web server is inaccessible. By...

GE UR family Improper Input Validation (CVE-2021-27418)

GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attacks, which may be used to send a malicious script. Also, UR Firmware web server does not perform HTM...

GHSA-FMJH-F678-CV3X github.com/nyaruka/phonenumbers Vulnerable to Improper Validation of Syntactic Correctness of Input

Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse function. An attacker can cause a panic by providing crafted input causing a "runtime error: slice bounds out of range"...

CVE-2025-10954

Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse function. An attacker can cause a panic by providing crafted input causing a "runtime error: slice bounds out of range"...

CVE-2025-21056

Improper input validation in Retail Mode prior to version 5.59.4 allows self attackers to execute privileged commands on their own devices...

TOTOLINK X6000R Improper Input Validation Vulnerability

TOTOLINK X6000R is a Wi-Fi 6 technology-enabled wireless router from China's Gion Electronics TOTOLINK, featuring high concurrent connections and dual-band transmission. The TOTOLINK X6000R suffers from an improper input validation vulnerability that originates from the program's failure to...

CVE-2025-52907

Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.1360B20241207...

Improper Validation of Syntactic Correctness of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the torch.Tensor.random function when a model is compiled with Inductor. An attacker can cause the application to crash or become unresponsive by triggering a syntax error...

CVE-2025-40836

Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges...

CVE-2025-40836 Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability

Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges...

CVE-2025-40836

Summary: CVE-2025-40836 affects Ericsson Indoor Connect 8855 with an improper input validation vulnerability that could allow an attacker to execute commands with escalated privileges. Multiple sources (NVD, Red Hat, CVE lists, industry feeds) confirm the vulnerability title and potential impact....

CVE-2025-52905

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360B20241207...

TOTOLINK X6000R Improper Input Validation Vulnerability

TOTOLINK X6000R is a wireless router supporting Wi-Fi 6 technology from China's Gion Electronics TOTOLINK, focusing on high concurrent connections and dual-band transmission capabilities. The TOTOLINK X6000R suffers from an improper input validation vulnerability, which can be exploited by...

Tenda AC6 Improper Input Validation Vulnerability

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps. The Tenda AC6 suffers from an improper input validation vulnerability that stems from improper handling of the funcname, funcpara1, and funcpara2 parameters in the...

CVE-2025-52907

CVE-2025-52907 concerns TOTOLINK X6000R, a Wi‑Fi 6 router. The connected sources describe an improper input validation vulnerability in the device’s software stack that can enable command injection and file manipulation. The affected release range is X6000R through version V9.4.0cu.1360_B20241207...

CVE-2025-47314 Improper Input Validation in Automotive Software platform based on QNX

Memory corruption while processing data sent by FE driver...

CVE-2025-47314

The CVE-2025-47314 issue affects an Automotive Software platform based on QNX used in Qualcomm chipsets. The root cause reported is memory corruption encountered when processing data sent by the FE driver. The vulnerability is described with a CVSSv3.1 base score of 7.8 (HIGH) and an attack vecto...