Lucene search
+L

18269 matches found

Vulnrichment
Vulnrichment
•added 2025/06/10 10:20 p.m.•3 views

CVE-2025-47096 Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass, allowing a low impact to the integrity of the component. Exploitation of this issue requires user interaction in that a victim must...

3.5CVSS6.2AI score0.00352EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/10 10:20 p.m.•82 views

CVE-2025-47096

The CVE-2025-47096 entry concerns Adobe Experience Manager (AEM) versions 6.5.22 and earlier affected by an Improper Input Validation vulnerability that can bypass a security feature. Impact is described as low on integrity with no confidentiality/availability impact, and exploitation requires us...

3.5CVSS6.2AI score0.00352EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2025/06/10 9:18 p.m.•5 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation due to the improper validation of user-supplied low-order points during the Diffie-Hellman key exchange process. An attacker can compromise session security by forcing the identity point. Additionally, incorrec...

6.9CVSS6.8AI score0.00501EPSS
SaveExploits0References3
NVD
NVD
•added 2025/06/10 6:15 p.m.•18 views

CVE-2025-0051

Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service...

8.7CVSS0.00375EPSS
SaveExploits0References1
OSV
OSV
•added 2025/06/10 5:23 p.m.•20 views

CVE-2025-47171

Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally...

6.7CVSS5.9AI score0.01697EPSS
SaveExploits1References1
Veracode
Veracode
•added 2025/06/10 12:00 p.m.•17 views

Denial Of Service (DoS)

github.com/pion/interceptor is vulnerable to Denial of Service DoS. The vulnerability is due to improper input validation in the RTP packet factory that fails to correctly validate padding length, allowing crafted RTP packets to trigger a panic in Pion-based SFUs...

7.5CVSS7.3AI score0.00493EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2025/06/10 8:34 a.m.•77 views

CVE-2025-3116

Summary: CVE-2025-3116 involves an input validation weakness in Schneider Electric Modicon Controllers (M241/M251/M258/LMC058/M262, per multiple reports) that can allow a Denial of Service when an authenticated user sends a specially crafted HTTPS request with improperly formatted body data to th...

7.1CVSS7AI score0.00463EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/10 8:22 a.m.•8 views

CVE-2025-3898

CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends HTTPS request containing invalid data type to the webserver...

7.1CVSS6.7AI score0.00531EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/10 12:00 a.m.•5 views

CVE-2025-47968: Improper Input Validation

Improper input validation in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...

7.8CVSS7.2AI score0.00398EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/10 12:00 a.m.•10 views

CVE-2025-4680: Improper Input Validation

Improper Input Validation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects upKeeper Instant Privilege Access: before 1.4.0...

8.6CVSS5.9AI score0.00213EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/10 12:00 a.m.•2 views

CVE-2025-3116: Improper Input Validation

CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends special malformed HTTPS request containing improper formatted body data to the controller...

7.1CVSS5.8AI score0.00463EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/10 12:00 a.m.•6 views

CVE-2025-1041: Improper Input Validation

An improper input validation discovered in Avaya Call Management System could allow an unauthorized remote command via a specially crafted web request. Affected versions include 18.x, 19.x prior to 19.2.0.7, and 20.x prior to 20.0.1.0...

9.9CVSS5.7AI score0.00443EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/10 12:00 a.m.•2 views

CVE-2025-3898: Improper Input Validation

CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends HTTPS request containing invalid data type to the webserver...

7.1CVSS5.8AI score0.00531EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/10 12:00 a.m.•16 views

Avaya Call Management System 安全漏洞

Avaya Call Management System is an integrated analytics and reporting solution from Avaya, Inc. that keeps you informed about virtually everything. A security vulnerability exists in Avaya Call Management System version 18.x, 19.x prior to 19.2.0.7, and 20.x prior to 20.0.1.0, which stems from...

9.9CVSS7AI score0.00443EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/10 12:00 a.m.•7 views

PT-2025-25156

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.22 and earlier Description The issue is related to an Improper Input Validation that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, whe...

8CVSS6.3AI score0.00352EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/10 12:00 a.m.•4 views

CVE-2025-47171: Improper Input Validation

Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally...

6.7CVSS6.9AI score0.01697EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/10 12:00 a.m.•2 views

CVE-2025-47173: Improper Restriction of Names for Files and Other Resources

Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally...

7.8CVSS7.4AI score0.00584EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/10 12:00 a.m.•2 views

CVE-2025-0052: Improper Input Validation

Improper input validation performed during the authentication process of FlashBlade could lead to a system Denial of Service...

8.3CVSS5.8AI score0.00328EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/10 12:00 a.m.•1 views

CVE-2025-47096: Improper Input Validation

Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass, allowing a low impact to the integrity of the component. Exploitation of this issue requires user interaction in that a victim must...

3.5CVSS5.8AI score0.00352EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/10 12:00 a.m.•10 views

CVE-2025-0037: Improper Input Validation

In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory spaces, resulting in the loss of integrity and confidentiality...

6.6CVSS5.8AI score0.00168EPSS
SaveExploits0References1
Rows per page
Query Builder