CVE-2025-3837: Improper Input Validation

An improper input validation vulnerability is identified in the End of Life EOL OVA based connect component which is deployed for installation purposes in the customer internal network. This EOL component was deprecated in September 2023 with end of support extended till January 2024. Under certa...

Improper Input Validation

org.apache.poi:poi-ooxml is vulnerable to Improper Input validation. The vulnerability is due to improper input validation due to the lack of checks for duplicate ZIP entry names in OOXML files, which can lead to inconsistent parsing behavior across different products...

Rockwell Automation Arena Local Code Execution Vulnerability (CNVD-2025-21434)

Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...

Rockwell Automation Arena Local Code Execution Vulnerability (CNVD-2025-21437)

Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...

Unspecified Vulnerability in Rockwell Automation Arena (CNVD-2025-21431)

Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...

CVE-2025-32442: Improper Validation of Specified Type of Input

Fastify is a fast and low overhead web framework, for Node.js. In versions 5.0.0 to 5.3.0 as well as version 4.29.0, applications that specify different validation strategies for different content types have a possibility to bypass validation by providing a slightly altered content type such as...

CVE-2025-26477

Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...

CVE-2025-26477

Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...

CVE-2025-26477

CVE-2025-26477 affects Dell ECS up to version 3.8.1.4: an Improper Input Validation vulnerability that could allow a low-privileged, remotely authenticated attacker to achieve code execution. The connected documents confirm the affected software and the root cause (input validation error) with a ...

CVE-2025-26477: Improper Input Validation

Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...

Security Bulletin: AIX is vulnerable to denial of service (CVE-2024-47102, CVE-2024-52906)

Summary Vulnerabilities in the AIX TCP/IP and perfstat kernel extensions may lead to a denial of service CVE-2024-47102, CVE-2024-52906. Vulnerability Details CVEID:CVE-2024-47102 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel...

Security Bulletin: IBM Sterling Secure Proxy is vulnerable to several issues (CVE-2024-38337, CVE-2024-25016)

Summary IBM Sterling Secure Proxy is affected by an improper input validation vulnerability that is exploitable by authenticated, privileged users. IBM Sterling Secure Proxy SSP also uses IBM MQ, which is vulnerable to improper input validation. Vulnerability Details CVEID:CVE-2024-38337...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Base OS issues

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Base OS issues. We have updated the base image used by our Speech Services and the following vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability...

Security Bulletin: IBM Technical Suppport Appliance - possible security flaws or denial of service

Summary Numerous fixes to the Linux kernel for reported issues related to various security vulnerabilities such as demnial of service, unauthorized access, or leakage of sensitive data. Vulnerability Details CVEID:CVE-2019-25162 DESCRIPTION: Linux Kernel s vulnerable to a denial of service, cause...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in ingress-nginx

Summary Multiple vulnerabilities in ingress-nginx that is used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2025-1097 DESCRIPTION: A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the auth-tls-match-cn Ingre...

Security Bulletin: Vulnerabilities in dependencies affect IBM Voice Gateway

Summary Security Vulnerabilities in dependencies affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-24970 DESCRIPTION: Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and...

Vulnerabilities fixed in Rockwell Automation Arena

Rockwell Automation has fixed vulnerabilities in Arena. The vulnerabilities in Rockwell Automation Arena are related to local code execution caused by improper validation of user-supplied data. This allows malicious actors to reveal sensitive information and execute arbitrary code when a legitima...

Exploit for Improper Input Validation in Silverpeas

CVE-2025-46047 Silverpeas -u Example...

Adobe ColdFusion Improper Input Validation Vulnerability

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from an improper input validation vulnerability that can be exploited by an...

netfilter DoS

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to improper validation of input data in the brnfdevqueuexmit function. Exploiting this vulnerability can allow an attacker to cause a service failure...