Apache Tomcat 10.1.0.M1 < 10.1.40 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.1.40. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.40security-10 advisory. - Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid...

Linux Distros Unpatched Vulnerability : CVE-2023-46589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82...

CVE-2025-27211

An Improper Input Validation in EdgeMAX EdgeSwitch Version 1.10.4 and earlier could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network...

CVE-2025-27211

The EdgeMAX EdgeSwitch (Version 1.10.4 and earlier) is vulnerable to a Command Injection flaw due to improper input validation . A malicious actor with access to the adjacent network of the EdgeSwitch can exploit this vulnerability to execute arbitrary commands. To mitigate this risk, it is recom...

CVE-2025-27212

Several UniFi Access devices are susceptible to a Command Injection vulnerability due to improper input validation . A malicious actor with access to the UniFi Access management network could exploit this to achieve remote code execution (RCE) . Affected products include UniFi Access Reader Pro (...

Ubiquiti EdgeMAX EdgeSwitch 安全漏洞

Ubiquiti EdgeMAX EdgeSwitch is a PoE+ Gigabit switch from Ubiquiti USA. A security vulnerability exists in Ubiquiti EdgeMAX EdgeSwitch version 1.10.4 and prior versions, which stems from improper input validation and could lead to command injection...

CVE-2025-27212: Improper Input Validation

An Improper Input Validation in certain UniFi Access devices could allow a Command Injection by a malicious actor with access to UniFi Access management network. Affected Products: UniFi Access Reader Pro Version 2.14.21 and earlier UniFi Access G2 Reader Pro Version 1.10.32 and earlier UniFi...

CVE-2025-27211: Improper Input Validation

An Improper Input Validation in EdgeMAX EdgeSwitch Version 1.10.4 and earlier could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network...

GHSA-JR43-Q92Q-5Q82 Apache Zeppelin: Arbitrary file read by adding malicious JDBC connection string

Improper Input Validation vulnerability in Apache Zeppelin. The fix for JDBC URL validation in CVE-2024-31864 did not account for URL encoded input. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue...

CVE-2024-52279

Improper Input Validation vulnerability in Apache Zeppelin. The fix for JDBC URL validation in CVE-2024-31864 did not account for URL encoded input. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue...

CVE-2024-52279 Apache Zeppelin: Arbitrary file read by adding malicious JDBC connection string

Improper Input Validation vulnerability in Apache Zeppelin. The fix for JDBC URL validation in CVE-2024-31864 did not account for URL encoded input. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue...

CVE-2024-52279: Improper Input Validation

Improper Input Validation vulnerability in Apache Zeppelin. The fix for JDBC URL validation in CVE-2024-31864 did not account for URL encoded input. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue...

CVE-2025-30480

Dell PowerProtect Data Manager, versions prior to 19.19, contains an Improper Input Validation vulnerability in PowerProtect Data Manager. A low privileged attacker with remote access could potentially exploit this vulnerability to read arbitrary files...

CVE-2025-8320

Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this...

CVE-2025-54564: Improper Input Validation

uploadsm in ChargePoint Home Flex 5.5.4.13 does not validate a user-controlled string for bz2 decompression, which allows command execution as the nobody user...

Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple vulnerabilities

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana OnPrem build 1.0.299 Vulnerability Details CVEID:CVE-2025-31672 DESCRIPTION: Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. Thes...

CVE-2025-30480

Dell PowerProtect Data Manager, versions prior to 19.19, contains an Improper Input Validation vulnerability in PowerProtect Data Manager. A low privileged attacker with remote access could potentially exploit this vulnerability to read arbitrary files...

CVE-2025-30480

Dell PowerProtect Data Manager, versions prior to 19.19, contains an Improper Input Validation vulnerability in PowerProtect Data Manager. A low privileged attacker with remote access could potentially exploit this vulnerability to read arbitrary files...

CVE-2025-30480

CVE-2025-30480 affects Dell PowerProtect Data Manager, prior to version 19.19. The issue is an Improper Input Validation in the PowerProtect Data Manager component, allowing a low-privileged attacker with remote access to read arbitrary files. Impact is limited to reading files; no broader exploi...

CVE-2025-30480

Dell PowerProtect Data Manager, versions prior to 19.19, contains an Improper Input Validation vulnerability in PowerProtect Data Manager. A low privileged attacker with remote access could potentially exploit this vulnerability to read arbitrary files...