CVE-2026-22072: Improper Input Validation

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens...

PT-2026-73235

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

VulnCheck KEV: CVE-2025-52907

Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.1360B20241207...

CVE-2026-65337: Improper Input Validation

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash...

Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i (CVE-2026-10051, CVE-2026-6790, CVE-2026-8384, CVE-2026-10050, CVE-2026-59879, CVE-2026-59880)

Summary IBM Rational Developer for i is affected by a sensitive information exposure vulnerability in Eclipse Jetty-server CVE-2026-10051, an improper input validation vulnerability in Eclipse Jetty-server CVE-2026-6790, an authorization decision vulnerability in Eclipse Jetty-util CVE-2026-8384,...

CVE-2026-16915

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation...

CVE-2026-16915

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation...

EUVD-2026-58795

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation...

CVE-2026-16915 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation...

CVE-2026-16915

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by CVE-2026-16915 due to improper input validation, enabling a remote authenticated attacker to obtain sensitive information. The IBM bulletin documents multiple vulnerabilities in the same product family and lists CVE-2026-16915 under ...

CVE-2026-19679 Improper Input Validation

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

CVE-2026-73624

A flaw was found in GitPython. This vulnerability allows a remote attacker to overwrite arbitrary files on the system. By failing to properly validate git options passed to the Diffable.diff method, an attacker can supply a malicious output argument to write patch content to attacker-controlled...

Denial Of Service (DoS)

Micrometer is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of specially crafted HTTP requests, which allows an attacker to send malicious requests that consume excessive resources and cause the affected application to become unavailable...

CVE-2026-73845: Improper Input Validation

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckangetmqaquality and ckangetmqaqualitydetails tools in src/tools/quality.ts use isValidMqaServer to validate the serverurl parameter with a prefix-only regular expression for dati.gov.it, allowing suffix-host an...

IBM Informix Dynamic Server 12.10.x / 14.10.x < 14.10.xC13W13 / 15.0.x < 15.0.1.13 RCE (7282827)

The version of IBM Informix Dynamic Server installed on the remote host is 12.10.x, or 14.10.x prior to 14.10.xC13W13, or 15.0.x prior to 15.0.1.13. It is, therefore, affected by a remote code execution vulnerability in the IBM Informix Wire Listener as referenced in the 7282827 vendor advisory. ...

CVE-2026-16915: Improper Limitation of a Pathname to a Restricted Directory

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation...

EUVD-2026-58394

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests...

CVE-2026-72660 Uncaught Exception in Kibana Leading to Denial of Service

Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged access can cause an internal error condition in Kibana by supplying specially crafted data...

CVE-2026-72660 Uncaught Exception in Kibana Leading to Denial of Service

Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged access can cause an internal error condition in Kibana by supplying specially crafted data...

CVE-2026-72660

Kibana is affected by CVE-2026-72660 due to an Uncaught Exception (CWE-248) from Improper Input Validation (CWE-20) that can cause a Denial of Service (CAPEC-153). An authenticated Kibana account with at least read access and the ability to write to an Elasticsearch index can trigger an internal ...