16770 matches found
Siemens SCALANCE and RUGGEDCOM Improper Input Validation (CVE-2025-38084)
"In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: unshare page tables during VMA split, not before Currently, splitvma triggers hugetlb page table unsharing through vmops-maysplit. This happens before the VMA lock and rmap locks are taken - which is too early, it...
Siemens SCALANCE and RUGGEDCOM Improper Input Validation (CVE-2025-38086)
"In the Linux kernel, the following vulnerability has been resolved: net: ch9200: fix uninitialised access during miinwayrestart In miinwayrestart the code attempts to call mii-mdioread which is ch9200mdioread. ch9200mdioread utilises a local buffer called buff, which is initialised with...
Siemens SCALANCE and RUGGEDCOM Improper Input Validation (CVE-2025-38345)
In the Linux kernel, the following vulnerability has been resolved: ACPICA: fix acpi operand cache leak in dswstate.c ACPICA commit 987a3b5cf7175916e2a4b6ea5b8e70f830dfe732 I found an ACPI cache leak in ACPI early termination and boot continuing case. When early termination occurs due to maliciou...
CVE-2025-29950: Improper Access Control for Volatile Memory Containing Boot Code
Improper input validation in system management mode SMM could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution...
CVE-2026-21229: Improper Input Validation
Improper input validation in Power BI allows an authorized attacker to execute code over a network...
CVE-2026-25892: Improper Input Validation
Adminer is open-source database management software. Adminer v5.4.1 and earlier has a version check mechanism where adminer.org sends signed version info via JavaScript postMessage, which the browser then POSTs to ?script=version. This endpoint lacks origin validation and accepts POST data from a...
CVE-2025-15566: Improper Input Validation
A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/auth-proxy-set-headers Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...
CVE-2026-25723: Improper Input Validation
Claude Code is an agentic coding tool. Prior to version 2.0.55, Claude Code failed to properly validate commands using piped sed operations with the echo command, allowing attackers to bypass file write restrictions. This vulnerability enabled writing to sensitive directories like the .claude...
CVE-2026-25722: Improper Input Validation
Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with write operations to protected folders. By using the cd command to navigate into sensitive directories like .claude, it was possible to bypass write protecti...
CVE-2026-25631: Improper Input Validation
n8n is an open source workflow automation platform. Prior to 1.121.0, there is a vulnerability in the HTTP Request node's credential domain validation allowed an authenticated attacker to send requests with credentials to unintended domains, potentially leading to credential exfiltration. This on...
CVE-2025-15330
Tanium addressed an improper input validation vulnerability in Deploy...
CVE-2025-15325
Tanium addressed an improper input validation vulnerability in Discover...
CVE-2025-15321
Tanium addressed an improper input validation vulnerability in Tanium Appliance...
CVE-2025-15321
Tanium addressed an improper input validation vulnerability in Tanium Appliance...
CVE-2025-15325
Tanium Discover contains an improper input validation vulnerability (CVE-2025-15325). The issue is described across multiple sources as affecting Tanium Discover, with a CVSS 3.1 base score of 6.3 (Network attack vector, Low privileges required, No user interaction). The vulnerability is characte...
CVE-2025-15325 Tanium addressed an improper input validation vulnerability in Discover.
Tanium addressed an improper input validation vulnerability in Discover...
CVE-2025-15325 Tanium addressed an improper input validation vulnerability in Discover.
Tanium addressed an improper input validation vulnerability in Discover...
CVE-2025-15325
Tanium addressed an improper input validation vulnerability in Discover...
