Lucene search
+L

16786 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•3 views

CVE-2026-20951: Improper Input Validation

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally...

7.8CVSS7.4AI score0.00813EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•1 views

CVE-2026-22862: Improper Input Validation

go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.16.8...

7.5CVSS5.9AI score0.00708EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•1 views

CVE-2026-21271: Improper Input Validation

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

8.6CVSS8.1AI score0.00247EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•2 views

CVE-2026-20856: Improper Input Validation

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

8.1CVSS7.8AI score0.01133EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•20 views

PT-2026-2768

Name of the Vulnerable Software and Affected Versions Dreamweaver Desktop versions 21.6 and earlier Description Dreamweaver Desktop versions 21.6 and earlier are susceptible to an Improper Input Validation issue. Successful exploitation could lead to arbitrary code execution within the current...

8.6CVSS7.6AI score0.00247EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•9 views

PT-2026-2769

Name of the Vulnerable Software and Affected Versions Dreamweaver Desktop versions 21.6 and earlier Description Dreamweaver Desktop versions 21.6 and earlier are susceptible to an Improper Input Validation issue. Successful exploitation of this issue could lead to arbitrary code execution within...

8.6CVSS7.6AI score0.00247EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•14 views

PT-2026-2770

Name of the Vulnerable Software and Affected Versions Dreamweaver Desktop versions 21.6 and earlier Description Dreamweaver Desktop versions 21.6 and earlier are susceptible to an Improper Input Validation issue. This could allow an attacker to manipulate or inject malicious data into files on th...

8.6CVSS7.3AI score0.00229EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•2 views

CVE-2026-22868: Improper Input Validation

go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.16.8...

7.5CVSS5.9AI score0.00634EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•2 views

CVE-2026-0543: Improper Input Validation

Improper Input Validation CWE-20 in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation CAPEC-130 through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector...

6.5CVSS6.1AI score0.00421EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•10 views

PT-2026-2663

Name of the Vulnerable Software and Affected Versions Windows LDAP affected versions not specified Description An issue with how input is checked in Windows Lightweight Directory Access Protocol LDAP could allow a network attacker who is already authorized to modify the system. This tampering cou...

6.8CVSS6.6AI score0.01138EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•1 views

CVE-2026-21268: Improper Input Validation

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

8.6CVSS8.1AI score0.00247EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•3 views

CVE-2026-21272: Improper Input Validation

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could leverage this vulnerability to manipulate or inject malicious data into files on the system. Exploitation of this issue requir...

8.6CVSS7.7AI score0.00229EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•4 views

CVE-2025-37173: Improper Input Validation

An improper input handling vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating systems. Successful exploitation could allow an authenticated malicious actor with valid credentials to trigger unintended behavior on the affected...

7.2CVSS5.9AI score0.00426EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•0 views

CVE-2026-20812: Improper Input Validation

Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network...

6.5CVSS6.7AI score0.01138EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•0 views

CVE-2026-0878: Improper Input Validation

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...

8CVSS7.4AI score0.00476EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/10 12:00 a.m.•0 views

CVE-2026-22611: Improper Input Validation

AWS SDK for .NET works with Amazon Web Services to help build scalable solutions with Amazon S3, Amazon DynamoDB, Amazon Glacier, and more. From versions 4.0.0 to before 4.0.3.3, Customer applications could be configured to improperly route AWS API calls to non-existent or non-AWS hosts. This...

3.7CVSS5.7AI score0.00235EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/01/09 3:21 p.m.•23 views

Security Bulletin: IBM Operations Analytics - Log Analysis is affected by an improper input validation due to Apache Commons HttpClient

Summary Apache Commons HttpClient is used by IBM Operations Analytics - Log Analysis as part of the standards-based Java library for executing HTTP requests. CVE-2012-6153, CVE-2012-5783. Vulnerability Details CVEID:CVE-2012-6153 DESCRIPTION: http/conn/ssl/AbstractVerifier.java in Apache Commons...

5.8CVSS6.8AI score0.09213EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:41 p.m.•16 views

CVE-2023-25696

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3...

9.8CVSS6.9AI score0.01982EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:33 p.m.•27 views

CVE-2023-31455

Pexip Infinity before 31.2 has Improper Input Validation for RTCP, allowing remote attackers to trigger an abort...

7.5CVSS7.1AI score0.00615EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:24 a.m.•14 views

CVE-2021-31574

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID:...

9.8CVSS7.9AI score0.01679EPSS
SaveExploits0References1
Rows per page
Query Builder