PT-2025-42079

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue with input validation in the Windows Kernel could allow a local attacker to gain elevated privileges. Recommendations At the moment, there is no information about a newer...

PT-2025-42139

Name of the Vulnerable Software and Affected Versions Windows Authentication Methods affected versions not specified Description An improper validation of a specific input type within Windows Authentication Methods can allow a local attacker to gain elevated privileges. Recommendations At the...

PT-2025-42165

Improper input validation in the component /kafka/ui/serdes/CustomSerdeLoader.java of kafka-ui v0.6.0 to v0.7.2 allows attackers to execute arbitrary code via supplying crafted data...

ROS-20251014-11

Go programming language vulnerability is related to improper input validation. Exploitation The vulnerability could allow a remote attacker to bypass existing security restrictions. security...

Adobe Connect 跨站脚本漏洞

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that is caused by improper validation of user-supplied input. An attacker could exploit the vulnerability to steal the victim's...

Centreon 安全漏洞

Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. A security vulnerability exists in Centreon versions 24.10.0 through 24.10.13, 24.04.0 through 24.04.1...

PT-2025-41964

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated attacker ...

Centreon 安全漏洞

Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. A security vulnerability exists in Centreon versions 24.10.0 through 24.10.13, 24.04.0 through 24.04.1...

SFS Winsure SQL注入漏洞

SFS Winsure is an insurance solution suite from SFS Turkey. SFS Winsure versions 21.08.2025 and earlier suffer from a SQL injection vulnerability that stems from improper neutralization of special elements, which could lead to a blind SQL injection attack...

PT-2025-42054

Name of the Vulnerable Software and Affected Versions Microsoft Windows Speech affected versions not specified Description An issue with improper input validation exists in Microsoft Windows Speech. This allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2025-42082

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An issue with input validation in the Microsoft Windows Search Component can allow a local attacker to cause a denial of service. Recommendations At the moment, there is no...

ROS-20251014-03

Golang programming language vulnerability is related to improper input validation. Exploitation exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

CVE-2025-27259 Ericsson Network Manager: improper neutralization of user controlled input

Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains...

CVE-2025-27259 Ericsson Network Manager: improper neutralization of user controlled input

Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains...

CVE-2025-27259

CVE-2025-27259 affects Ericsson Network Manager prior to ENM 25.2 GA. Root cause is improper neutralization of user controlled input. Impact described as exfiltration of limited data or redirect to other sites/domains. No exploitation details are provided in the sources; reported remediation is t...

CVE-2025-31995

HCL Unica MaxAI Workbench is vulnerable to improper input validation. This allows attackers to exploit vulnerabilities such as SQL Injection, XSS, or command injection, leading to unauthorized access or data breaches, etc...

CVE-2025-31995 HCL Unica MaxAI Workbench is vulnerable to improper input validation

HCL Unica MaxAI Workbench is vulnerable to improper input validation. This allows attackers to exploit vulnerabilities such as SQL Injection, XSS, or command injection, leading to unauthorized access or data breaches, etc...

CVE-2025-31993

HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery SSRF. An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server...

CVE-2025-31993 HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF)

HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery SSRF. An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server...

HCL Unica Centralized Offer Management 安全漏洞

HCL Unica Centralized Offer Management is a module of HCL India responsible for the unified management and distribution of offers. A security vulnerability exists in HCL Unica Centralized Offer Management that stems from improper input validation and could lead to a server-side request forgery...