CVE-2024-51462: Modification of Assumed-Immutable Data (MAID)

IBM QRadar WinCollect Agent 10.0.0 through 10.1.12 could allow a remote attacker to inject XML data into parameter values due to improper input validation of assumed immutable data...

Cross-Site Scripting (XSS)

microweber/microweber is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper input validation in the "create new backup" function, allowing a remote attacker to execute arbitrary code via the endpoint /admin/module/view?type=adminbackup...

CVE-2025-20630: Improper Validation of Specified Type of Input

Mattermost Mobile versions =2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel...

CVE-2025-20086: Improper Validation of Specified Type of Input

Mattermost versions 10.2.x = 10.2.0, 9.11.x = 9.11.5, 10.0.x = 10.0.3, 10.1.x = 10.1.3 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post...

ROS-20250115-06

A vulnerability in the ocfs2 component of the Linux kernel is related to the dereferencing of a NULL pointer in the ocfs2fillsuper function in fs/ocfs2/super.c, toocfs2trigger, ocfs2dbfrozentrigger and ocfs2journalaccess in fs/ocfs2/journal.c. Exploitation of the vulnerability could allow an...

Improper Input Validation

Overview UmbracoForms is a tool that makes creating contact forms, entry forms and questionnaires just as easy as using Word. Affected versions of this package are vulnerable to Improper Input Validation due to the lack of server-side validation for character limits in short and long answer field...

Improper Input Validation

Overview Umbraco.Forms is an a form creator that's as easy to use. Affected versions of this package are vulnerable to Improper Input Validation due to the lack of server-side validation for character limits in short and long answer fields. An attacker can bypass client-side validations and submi...

CVE-2025-23041: Improper Input Validation

Umbraco.Forms is a web form framework written for the nuget ecosystem. Character limits configured by editors for short and long answer fields are validated only client-side, not server-side. This issue has been patched in versions 8.13.16, 10.5.7, 13.2.2, and 14.1.2. Users are advised to upgrade...

CVE-2025-21234: Improper Input Validation

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability...

CVE-2025-21370: Improper Input Validation

Windows Virtualization-Based Security VBS Enclave Elevation of Privilege Vulnerability...

CVE-2025-21230: Improper Input Validation

Microsoft Message Queuing MSMQ Denial of Service Vulnerability...

CVE-2024-48858: Improper Validation of Specified Type of Input

Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec...

PT-2025-2812

Name of the Vulnerable Software and Affected Versions: QNX SDP versions 7.0 through 8.0 Description: The issue is related to improper input validation in the PCX image codec, which could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using t...

CVE-2025-21284: Improper Input Validation

Windows Virtual Trusted Platform Module Denial of Service Vulnerability...

CVE-2025-21280: Improper Input Validation

Windows Virtual Trusted Platform Module Denial of Service Vulnerability...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA versions prior to 3.2.6 that stems from improper input validation and cleanup and is susceptible to a stored cross-site scripting attack, which allows ...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by Nilson Lazarin Individual Developer. WeGIA suffers from a cross-site scripting vulnerability that stems from improper input validation and cleanup, which allows an attacker to inject malicious scripts that are reflected back to the user's browse...

Security Bulletin: vulnerability in OpenSSL affects IBM Workload Automation.

Summary IBM Workload Automation has vulnerability in OpenSSL CVE-2024-4603 Vulnerability Details CVEID:CVE-2024-4603 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by improper input validation by the EVPPKEYparamcheck or EVPPKEYpubliccheck function. By parsing a specially craft...

SUSE SLES15 Security Update : libmfx (SUSE-SU-2025:0050-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0050-1 advisory. - CVE-2023-48368: Fixed an improper input validation. bsc1226897 - CVE-2023-45221: Fixed an improper buffer restrictions. bsc122689...

SUSE: Security Advisory (SUSE-SU-2025:0050-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...