Lucene search
+L

18226 matches found

Positive Technologies
Positive Technologies
•added 2025/06/30 12:00 a.m.•5 views

PT-2025-27397

Name of the Vulnerable Software and Affected Versions: rLottie version V0.2 Description: The issue is related to an Improper Input Validation vulnerability in Samsung Open Source rLottie, which allows Path Traversal. Recommendations: For rLottie version V0.2, update to a version that fixes the...

9.8CVSS7.1AI score0.00283EPSS
SaveExploits0References18
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/30 12:00 a.m.•9 views

CVE-2025-53076: Improper Input Validation

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2...

9.8CVSS5.8AI score0.00391EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/30 12:00 a.m.•2 views

CVE-2025-53075: Improper Input Validation

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2...

9.8CVSS5.8AI score0.00283EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/28 12:00 a.m.•3 views

CVE-2023-28911: Improper Input Validation

A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results from the lack of proper validation of user-supplied data, which can result in an arbitrary channel disconnection. An attacker can leverage this vulnerability to cause a denial-of-service attack for every...

6.5CVSS5.9AI score0.00384EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/27 6:18 p.m.•43 views

CVE-2025-6444

ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This vulnerability allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

5.9CVSS6.7AI score0.00492EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/06/27 12:00 a.m.•17 views

Grafana Labs < 11.6.2 Improper Input Validation (CVE-2025-1088)

The version of Grafana Labs installed on the remote host is affected by an improper input validation vulnerability as referenced in the CVE-2025-1088 advisory. In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to improper input...

2.7CVSS5.5AI score0.00466EPSS
SaveExploits0References2
Mend
Mend
•added 2025/06/26 9:30 a.m.•5 views

CVE-2025-6703

Improper Input Validation vulnerability in Mozilla neqo leads to an unexploitable crash..This issue affects neqo: from 0.4.24 through 0.13.2...

6.5CVSS0.00248EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/06/26 12:00 a.m.•19 views

PT-2025-26949

Name of the Vulnerable Software and Affected Versions: neqo versions 0.4.24 through 0.13.2 Description: The issue is related to an Improper Input Validation vulnerability in Mozilla neqo, which leads to an unexploitable crash. Recommendations: For neqo versions 0.4.24 through 0.13.2, update to a...

6.5CVSS6.5AI score0.00248EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/26 12:00 a.m.•2 views

CVE-2025-6703: Improper Input Validation

Improper Input Validation vulnerability in Mozilla neqo leads to an unexploitable crash..This issue affects neqo: from 0.4.24 through 0.13.2...

6.5CVSS5.8AI score0.00248EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/25 6:15 p.m.•28 views

CVE-2025-6444

ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This vulnerability allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

5.9CVSS0.00492EPSS
SaveExploits0References1
Mend
Mend
•added 2025/06/25 5:41 p.m.•5 views

CVE-2025-6444

ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This vulnerability allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

8.2CVSS0.00492EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/06/25 5:41 p.m.•9 views

CVE-2025-6444 ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability

ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This vulnerability allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

5.9CVSS6.7AI score0.00492EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/25 5:41 p.m.•90 views

CVE-2025-6444 ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability

ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This vulnerability allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

5.9CVSS0.00492EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•5 views

CVE-2025-50178: Improper Input Validation

GitForge.jl is a unified interface for interacting with Git "forges." Versions prior to 0.4.3 lack input validation for user provided values in certain functions. In the GitForge.getrepo function for GitHub, the user can provide any string for the owner and repo fields. These inputs are not...

8.7CVSS5.8AI score0.00472EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•6 views

CVE-2025-6444: Improper Input Validation

ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This vulnerability allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

5.9CVSS5.9AI score0.00492EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/25 12:00 a.m.•4 views

CVE-2025-52569: Improper Input Validation

GitForge.jl is a unified interface for interacting with Git "forges." Versions prior to 5.9.1 lack input validation of input validation for user-provided values in certain functions. In the GitHub.repo function, the user can provide any string for the reponame field. These inputs are not validate...

8.7CVSS5.8AI score0.00472EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/06/24 11:24 p.m.•8 views

SUSE CVE-2025-6547

Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation.This issue affects pbkdf2: =3.1.2...

7.4CVSS7AI score0.00463EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2025/06/24 4:52 p.m.•27 views

Security Bulletin: IBM Sterling Connect:Direct Web Services vulnerable to spring-context-6.2.3.jar (CVE-2025-22233)

Summary IBM Sterling Connect:Direct Web Services uses spring-context-6.2.3.jar, which has vulnerability CVE-2025-22233. This has been addressed in fixpacks that are available on Fix Central. Vulnerability Details CVEID:CVE-2025-22233 DESCRIPTION: CVE-2024-38820 ensured Locale-independent, lowerca...

5.3CVSS6.4AI score0.00617EPSS
SaveExploits1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/24 12:00 a.m.•3 views

CVE-2025-52568: Improper Input Validation

NeKernal is a free and open-source operating system stack. Prior to version 0.0.3, there are several memory safety issues that can lead to memory corruption, disk image corruption, denial of service, and potential code execution. These issues stem from unchecked memory operations, unsafe...

8.8CVSS5.9AI score0.00529EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/23 7:15 p.m.•12 views

CVE-2025-6545

Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation. This vulnerability is associated with program files lib/to-buffer.Js. This issue affects pbkdf2: from 3.0.10 through 3.1.2...

9.1CVSS0.00447EPSS
SaveExploits0References3
Rows per page
Query Builder