Lucene search
+L

18075 matches found

Veracode
Veracode
•added 2025/10/21 8:44 p.m.•17 views

Improper Input Validation

picklescan is vulnerable to Improper Input Validation. The vulnerability is due to inadequate validation in the scanning logic that fails to properly inspect pickle files with PyTorch-related extensions, which allows an attacker to bypass security checks and execute malicious code when the file i...

9.3CVSS7.9AI score0.00847EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/21 12:00 a.m.•2 views

PT-2025-53521

Уязвимость компонента Core системы хранения данных Oracle ZFS Storage Appliance Kit компании Oracle Systems связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

6.8CVSS5.8AI score
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2025/10/21 12:00 a.m.•19 views

VulnCheck KEV: CVE-2025-54236

Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API...

9.1CVSS8.2AI score0.94532EPSS
SaveIn wildExploits9References159
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/20 12:00 a.m.•6 views

CVE-2025-12001: Improper Input Validation

Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

10CVSS5.8AI score0.00194EPSS
SaveExploits0References1
Veracode
Veracode
•added 2025/10/16 7:34 a.m.•12 views

Improper Input Validation

datahihi1/tiny-env is vulnerable to Improper Input Validation. The vulnerability is due to missing sanitization of characters, allowing attackers to inject comment text that can cause misconfigurations or authentication failures...

6.5CVSS6AI score0.00206EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2025/10/14 6:30 p.m.•22 views

GHSA-M494-W24Q-6F7W JDBC Driver for SQL Server has improper input validation issue

Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network...

8.1CVSS7.4AI score0.00735EPSS
SaveExploits0References12
OSV
OSV
•added 2025/10/14 6:15 p.m.•16 views

CVE-2025-60537

Improper input validation in the component /kafka/ui/serdes/CustomSerdeLoader.java of kafka-ui v0.6.0 to v0.7.2 allows attackers to execute arbitrary code via supplying crafted data...

6.5CVSS6.1AI score0.00456EPSS
SaveExploits0References3
NVD
NVD
•added 2025/10/14 6:15 p.m.•21 views

CVE-2025-60537

Improper input validation in the component /kafka/ui/serdes/CustomSerdeLoader.java of kafka-ui v0.6.0 to v0.7.2 allows attackers to execute arbitrary code via supplying crafted data...

6.5CVSS0.00456EPSS
SaveExploits0References3
NVD
NVD
•added 2025/10/14 5:16 p.m.•23 views

CVE-2025-59250

Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network...

8.1CVSS0.00735EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/14 5:15 p.m.•13 views

CVE-2025-59198

Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

5CVSS0.00474EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/10/14 2:00 p.m.•14 views

Windows Error Reporting Service Elevation of Privilege Vulnerability

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

7.8CVSS7.8AI score0.03384EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/10/14 2:00 p.m.•8 views

Windows Kernel Elevation of Privilege Vulnerability

Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS7.7AI score0.00305EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/10/14 2:00 p.m.•20 views

Windows Speech Runtime Elevation of Privilege Vulnerability

Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

8.8CVSS8AI score0.00395EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/10/14 2:00 p.m.•19 views

Windows Search Service Denial of Service Vulnerability

Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

5CVSS7.1AI score0.00474EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/10/14 2:00 p.m.•17 views

Windows Kernel Information Disclosure Vulnerability

Improper input validation in Windows Kernel allows an unauthorized attacker to disclose information locally...

5.1CVSS7.2AI score0.00464EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/10/14 2:00 p.m.•14 views

Windows Search Service Denial of Service Vulnerability

Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally...

5.5CVSS7.2AI score0.00501EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•16 views

PT-2025-42139

Name of the Vulnerable Software and Affected Versions Windows Authentication Methods affected versions not specified Description An improper validation of a specific input type within Windows Authentication Methods can allow a local attacker to gain elevated privileges. Recommendations At the...

7.8CVSS7.6AI score0.00273EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•5 views

PT-2025-42128

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Improper input validation in Microsoft Exchange Server can allow an unauthorized attacker to perform spoofing over a network. Recommendations At the moment, there is no...

7.8CVSS8.3AI score0.01019EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•4 views

PT-2025-42054

Name of the Vulnerable Software and Affected Versions Microsoft Windows Speech affected versions not specified Description An issue with improper input validation exists in Microsoft Windows Speech. This allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

8.8CVSS7.9AI score0.00395EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•2 views

CVE-2025-58716: Improper Input Validation

Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

8.8CVSS7.6AI score0.00395EPSS
SaveExploits0References1
Rows per page
Query Builder