11561 matches found
GHSA-XGFM-992V-H2HR Magento vulnerable to denial of service
Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Input Validation vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability by providing specially crafted input, causing th...
CVE-2025-49745
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-49554
Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Input Validation vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability by providing specially crafted input,...
CVE-2025-49554 Adobe Commerce | Improper Input Validation (CWE-20)
Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Input Validation vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability by providing specially crafted input,...
CVE-2025-49554 Adobe Commerce | Improper Input Validation (CWE-20)
Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Input Validation vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability by providing specially crafted input,...
CVE-2025-49554
CVE-2025-49554 — Adobe Commerce/Magento DoS via Improper Input Validation . Affected: Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier. Root cause: improper input validation could cause the application to crash or become unresponsive, enabling ...
CVE-2025-49554 Adobe Commerce | Improper Input Validation (CWE-20)
Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Input Validation vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability by providing specially crafted input,...
CVE-2025-25005
Technical details about CVE-2025-25005 are not publicly provided in the connected documents. Monitor updates from Microsoft MSRC and advisories for affected versions, impact, and fixes.
CVE-2025-49745
CVE-2025-49745 affects Microsoft Dynamics 365 (on-premises) (version 9.1). It is a cross-site scripting vulnerability caused by improper neutralization of input during web page generation, enabling an attacker to spoof the user interface over a network. The vulnerability requires user interaction...
CVE-2025-32004
CVE-2025-32004 concerns the Intel Edger8r Tool in the Intel SGX SDK. The issue is caused by improper input validation in the Edger8r Tool, which may permit an authenticated user to escalate privileges via local access. Documented impact indicates privilege escalation with local access, applicable...
CVE-2025-27537
Improper input validation for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2025-24296
CVE-2025-24296 affects Intel® E810 Ethernet firmware prior to 4.6. The issue is improper input validation in firmware, enabling a privileged user to cause a denial of service via local access. Intel attributes a local attack vector with low complexity and requires high privileges (per CVSS v3.1: ...
Microsoft Exchange Server Tampering Vulnerability
Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...
Fortinet FortiSOAR 跨站脚本漏洞
Fortinet FortiSOAR is a Security Orchestration, Automation and Response SOAR solution from Fortinet, Inc. A cross-site scripting vulnerability exists in Fortinet FortiSOAR versions 7.6.1 and earlier, 7.5.1 and earlier, 7.4 all, 7.3 all, 7.2 all, 7.0 all, and 6.4 all, which stems from improper inp...
PT-2025-32768 · Microsoft · Dynamics 365
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The software contains an improper neutralization of input during web page generation, leading to a cross-site scripting issue. This allows an unauthorized attacke...
Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities (CVE-2023-26125, CVE-2023-28155, CVE-2024-29018)
Summary Open source software is used by Astronomer with IBM as part of overall processing functionality. Vulnerability Details CVEID:CVE-2023-26125 DESCRIPTION: Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use...
CVE-2025-25212
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through improper input...
CVE-2025-25212
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through improper input...
CVE-2025-25212
CVE-2025-25212 affects OpenHarmony, with versions v5.0.3 and earlier vulnerable to local DoS due to improper input handling. The issue is a local-attack vector, leading to denial of service as described in multiple sources (e.g., PT-2025-32508). The most concrete remediation is to upgrade to Open...