CVE-2026-20524

A memory corruption vulnerability exists in apu due to improper input validation. This flaw could allow an attacker to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation can be addressed using Patch ID: ALPS11249004 (Issue ID: ...

CVE-2026-58834: Improper Input Validation

In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-104685

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2026-105060: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Logo Showcase logo-showcase allows Stored XSS.This issue affects Logo Showcase: from n/a through 4.0.4...

PT-2026-106158

In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-101919: Improper Input Validation

A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration kubeconfig secrets directly into the privileged control plane namespace without proper validation or sanitization. An authenticated user with cluster and secret creation permissions can exploit...

CVE-2026-20525: Reachable Assertion

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

PT-2026-104755

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.11.109...

CVE-2026-94646

Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift nodejs bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

PT-2026-104684

Name of the Vulnerable Software and Affected Versions apu affected versions not specified Description Improper input validation in apu can lead to memory corruption, which may allow a local escalation of privilege without requiring additional execution privileges or user interaction...

Cisco ASA Improper Input Validation (CVE-2019-1687)

A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to restart unexpectedly, resulting in a denial of service DoS condition. The...

Cisco ASA Improper Input Validation (CVE-2020-3304)

A vulnerability in the web interface of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is...

CVE-2025-48593

CVE-2025-48593: Ejecución Remota de Código Zero-Click en el Sistema Android Autor: LAKSHMIKANTHAN K letchupkt Fecha: Noviembre 2025 Gravedad: Crítica Una vulnerabilidad crítica de ejecución remota de código zero-click que afecta a los dispositivos Android 13-16. Resumen de la Vulnerabilidad...

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identificada en la función createSessionInternal del archivo PackageInstallerService.java, es una vulnerabilidad de alta gravedad que afecta a Android versiones 12 y 13. Esta vulnerabilidad permite a un atacante realizar un ataque «run-as any app», lo que conduce a un...

CVE-2021-3754

CVE-2021-3754 Este repositorio documenta los detalles de vulnerabilidad y el exploit para CVE-2021-3754 descubierto y reportado por mí mismo el 21 de agosto de 2021 Métricas CWE-20: Validación de entrada incorrecta CVSS: 5.3 MEDIUM Descripción Se encontró una falla en Apache Keycloak y Redhat SSO...

CVE-2022-24087

CVE-2022-24086-RCE y CVE-2022-24087-RCE Descripción de CVE CVE-2022-24086 y CVE-2022-24087 - vulnerabilidad de validación de entrada incorrecta en el formulario de contacto de Magento Open Source y Adobe Commerce - ha recibido una puntuación CVSS de 9.8 sobre 10, se clasifica como un problema de...

cve-2022-44268

CVE-2022-44268 ImageMagick es un paquete de software multiplataforma gratuito y de código abierto para visualizar, convertir y editar imágenes rasterizadas y vectoriales. Puede leer y escribir más de 200 formatos de archivo de imagen. ImageMagick está bajo la licencia Apache 2.0. Está disponible...

PT-2026-104619

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VeronaLabs WP Statistics wp-statistics allows Reflected XSS.This issue affects WP Statistics: from n/a through 14.16.14...

CVE-2025-34157

XSS almacenado en el flujo de eliminación de Coolify CVE-2025-34157 Afecta: Coolify ≤ v4.0.0-beta.420.6 Corregido en: v4.0.0-beta.420.7 Severidad: Crítica 9.4 Vector CVSS 4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE: CWE-79 Cross-Site Scripting, CWE-20 Validación de...

CVE-2026-103342 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor Free...