18036 matches found
CVE-2024-21953: Improper Validation of Specified Quantity in Input
Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss of guest data integrity...
PT-2026-7442
Name of the Vulnerable Software and Affected Versions versions prior to 2.3 Description A flaw exists in the System Management Mode SMM handler due to improper input validation. This could allow an attacker with Ring0 access to write to System Management RAM SMRAM and alter the execution flow...
CVE-2025-22453: Improper Input Validation
Improper input validation for some Server Firmware Update UtilitySysFwUpdt before version 16.0.12 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable local code execution. This...
CVE-2025-25210: Improper Input Validation
Improper input validation for some Server Firmware Update UtilitySysFwUpdt before version 16.0.12 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This...
CVE-2025-11142: Improper Neutralization of Special Elements used in an OS Command
The VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after authenticating with an operator- or administrator- privileged service account...
CVE-2026-21229: Improper Input Validation
Improper input validation in Power BI allows an authorized attacker to execute code over a network...
CVE-2026-21247: Improper Input Validation
Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally...
PT-2026-7351
Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally...
CVE-2025-29950: Improper Access Control for Volatile Memory Containing Boot Code
Improper input validation in system management mode SMM could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution...
CVE-2026-21258: Improper Input Validation
Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
Siemens SCALANCE and RUGGEDCOM Improper Input Validation (CVE-2025-39860)
"In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free in l2capsockcleanuplisten syzbot reported the splat below without a repro. In the splat, a single thread calling btacceptdequeue freed sk and touched it after that. The root cause would be the racy...
CVE-2026-25892: Improper Input Validation
Adminer is open-source database management software. Adminer v5.4.1 and earlier has a version check mechanism where adminer.org sends signed version info via JavaScript postMessage, which the browser then POSTs to ?script=version. This endpoint lacks origin validation and accepts POST data from a...
CVE-2026-25722: Improper Input Validation
Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with write operations to protected folders. By using the cd command to navigate into sensitive directories like .claude, it was possible to bypass write protecti...
CVE-2026-25631: Improper Input Validation
n8n is an open source workflow automation platform. Prior to 1.121.0, there is a vulnerability in the HTTP Request node's credential domain validation allowed an authenticated attacker to send requests with credentials to unintended domains, potentially leading to credential exfiltration. This on...
CVE-2025-15566: Improper Input Validation
A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/auth-proxy-set-headers Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...
CVE-2026-25723: Improper Input Validation
Claude Code is an agentic coding tool. Prior to version 2.0.55, Claude Code failed to properly validate commands using piped sed operations with the echo command, allowing attackers to bypass file write restrictions. This vulnerability enabled writing to sensitive directories like the .claude...
CVE-2025-15330
Tanium addressed an improper input validation vulnerability in Deploy...
CVE-2025-15325
Tanium addressed an improper input validation vulnerability in Discover...
