Lucene search
+L

18335 matches found

Microsoft CVE
Microsoft CVE
•added 2025/03/10 7:00 a.m.•6 views

Improper Input Validation in Vim

...

7.1CVSS5.4AI score0.22474EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/03/10 12:00 a.m.•9 views

PT-2025-10564

Name of the Vulnerable Software and Affected Versions GE Vernova UR IED family devices versions 7.0 through 8.60 Description The issue is related to improper input validation, which allows an attacker to establish a TCP connection through port forwarding. This lack of validation for IP addresses...

6.1CVSS0.00234EPSS
SaveExploits0References11
CVE
CVE
•added 2025/03/07 4:47 p.m.•75 views

CVE-2023-35894

IBM Control Center (IBM Sterling Control Center) versions 6.2.1 and 6.3.1 are affected by CVE-2023-35894 due to improper validation of HOST header input, enabling HTTP header injection that can lead to cross-site scripting, cache poisoning, or session hijacking. Remediation per IBM bulletin: upgr...

6.1CVSS6.8AI score0.00239EPSS
SaveExploits0References1Affected Software1
osv_ubuntu
osv_ubuntu
•added 2025/03/06 12:15 p.m.•8 views

UBUNTU-CVE-2024-38311

Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3. Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue...

6.3CVSS5.8AI score0.00909EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2025/03/06 11:34 a.m.•17 views

CVE-2024-38311 Apache Traffic Server: Request smuggling via pipelining after a chunked message body

Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3. Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue...

6.3CVSS6.6AI score
SaveExploits0References3
Mend
Mend
•added 2025/03/06 11:34 a.m.•4 views

CVE-2024-38311

Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3. Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue...

6.3CVSS0.00909EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2025/03/06 11:34 a.m.•43 views

CVE-2024-38311

Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3. Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue...

6.3CVSS6.3AI score0.00909EPSS
SaveExploits0
Veracode
Veracode
•added 2025/03/06 5:58 a.m.•23 views

Improper Input Validation

picklescan is vulnerable to Improper Input Validation. The vulnerability is due to improper validation of file extensions, allowing an attacker to include a malicious pickle file with a non-standard extension that bypasses security checks...

9.8CVSS7.1AI score0.00395EPSS
SaveExploits2References6Affected Software1
RedHat Linux
RedHat Linux
•added 2025/03/06 12:31 a.m.•7 views

microcode_ctl: Improper input validation in UEFI firmware

An improper input validation flaw was found in UEFI firmware. Some IntelR processors may allow a privileged user to enable privilege escalation via local access...

8.7CVSS5.7AI score0.00277EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/03/06 12:16 a.m.•5 views

microcode_ctl: Improper input validation in UEFI firmware

An improper input validation flaw was found in UEFI firmware. Some IntelR Processors may allow a privileged user to enable privilege escalation via local access...

8.7CVSS5.7AI score0.00254EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/06 12:00 a.m.•2 views

CVE-2024-38311: Improper Input Validation

Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3. Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue...

6.3CVSS6.6AI score0.00909EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/06 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2024-38311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.8,...

6.3CVSS6.5AI score0.00909EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/06 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2024-8260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of improper input...

7.3CVSS7.2AI score0.00341EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/03/05 7:47 p.m.•14 views

Improper Input Validation

Overview livewire/livewire is an A front-end framework for Laravel. Affected versions of this package are vulnerable to Improper Input Validation. An attacker can execute arbitrary code within Volt components by sending specially crafted payloads. Remediation Upgrade livewire/livewire to version...

9.8CVSS7.8AI score0.00619EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/05 12:00 a.m.•7 views

CVE-2025-27517: Improper Input Validation

Volt is an elegantly crafted functional API for Livewire. Malicious, user-crafted request payloads could potentially lead to remote code execution within Volt components. This vulnerability is fixed in 1.7.0...

9.3CVSS6.2AI score0.00619EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/05 12:00 a.m.•16 views

PT-2025-9863 · Apache +1 · Apache Traffic Server +1

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 8.0.0 through 8.1.11 Apache Traffic Server versions 9.0.0 through 9.2.8 Apache Traffic Server versions 10.0.0 through 10.0.3 Description: The issue is related to Improper Input Validation. Users are advised to...

9.1CVSS6AI score0.01569EPSS
SaveExploits1References30
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2023-26364

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - @adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a minor denial of service while...

5.3CVSS6.8AI score0.01154EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2021-41945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Encode OSS httpx 0.23.0 is affected by improper input validation in httpx.URL, httpx.Client and some functions using httpx.URL.copywith. CVE-2021-41945 Note tha...

9.1CVSS7.9AI score0.02118EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2024-24984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation for some IntelR Wireless BluetoothR products for Windows before version 23.40 may allow an unauthenticated user to potentially enable...

6.8CVSS5.9AI score0.00299EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2023-26159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse functio...

7.3CVSS6.6AI score0.00797EPSS
SaveExploits1References3
Rows per page
Query Builder