Lucene search
+L

4456 matches found

Snyk
Snyk
•added 2026/07/15 1:32 p.m.•9 views

Improper Validation of Specified Type of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via TLS handshake processing. An attacker can cause a denial of service by sending malformed TLS handshake messages that trigger excessive resource consumption or cause the application to...

8.7CVSS7AI score0.01232EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/15 1:32 p.m.•13 views

Improper Validation of Specified Type of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via TLS handshake processing. An attacker can cause a denial of service by sending malformed TLS handshake messages that trigger excessive resource consumption or cause the application to...

8.7CVSS7AI score0.01232EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/15 1:32 p.m.•7 views

Improper Validation of Specified Type of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via TLS handshake processing. An attacker can cause a denial of service by sending malformed TLS handshake messages that trigger excessive resource consumption or cause the application to...

8.7CVSS7AI score0.01232EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/15 2:01 a.m.•27 views

CVE-2026-13385

An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middleMITM user to make the router download and execute arbitrary command via a spoofed server. Refer to the ' Security Update for ASUS Router Firmware '...

9.5CVSS6.5AI score0.00141EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/14 9:16 p.m.•29 views

CVE-2026-24238

NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of this vulnerability might lead to code execution...

7.8CVSS0.00208EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/14 6:17 p.m.•28 views

CVE-2026-50302

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...

6.5CVSS0.00334EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•32 views

PT-2026-58713

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description Improper validation of a specified input type allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment, there is no information about ...

7.8CVSS7AI score0.01232EPSS
SaveExploits0References114
osv_ubuntu
osv_ubuntu
•added 2026/07/14 12:00 a.m.•18 views

UBUNTU-CVE-2026-50524

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network...

7.5CVSS7.2AI score0.01232EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•6 views

CVE-2026-24238: Improper Validation of Array Index

NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of this vulnerability might lead to code execution...

7.8CVSS7.5AI score0.00208EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•10 views

CVE-2026-46644: Improper Validation of Unsafe Equivalence in Input

Symfony Polyfill backports PHP features and provides compatibility layers for extensions and functions. From 1.17.1 until 1.38.1, symfony/polyfill-intl-idn accepts xn-- labels whose Punycode payload is empty or decodes to ASCII-only code points because Idn::process does not enforce the UTS 46...

6.9CVSS5.9AI score0.00538EPSS
SaveExploits0References2
Mend
Mend
•added 2026/07/13 9:30 p.m.•15 views

CVE-2026-15685

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists...

8.7CVSS7.3AI score0.00715EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•7 views

CVE-2026-15685: Improper Validation of Array Index

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists...

7.5CVSS7.3AI score0.00715EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•8 views

CVE-2026-57364: Improper Validation of Specified Quantity in Input

Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More better-payment allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Better Payment – Instant Payments,...

6.5CVSS5.8AI score0.00351EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/10 9:46 p.m.•52 views

CVE-2026-58587

The Drupal Canvas module is vulnerable to a Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. Specifically, the Canvas AI submodule fails to sufficiently validate image files uploaded via a custom API for use in the AI web chat before writing them...

6.1CVSS5.8AI score0.00256EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2026/07/10 9:46 p.m.•25 views

CVE-2026-58587 Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-065

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting XSS. This issue affects Drupal Canvas versions: from 0.0.0 to 1.4.2, from 1.5.0 to 1.5.2, from 1.6.0 to 1.6.1, from 1.7.0 to 1.7.1...

6.1CVSS6.1AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/07/10 1:57 p.m.•23 views

EUVD-2026-42884

Capgo before 12.128.2 contains an improper validation vulnerability in the acceptinvitation endpoint that creates user accounts before captcha validation is enforced. Attackers can bypass captcha protection by sending POST requests with invalid captcha tokens to create unwanted accounts and burn...

6.9CVSS5.9AI score0.00377EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/10 1:57 p.m.•19 views

CVE-2026-56312 Capgo - Account Creation Before CAPTCHA Validation in accept_invitation Endpoint

Capgo before 12.128.2 contains an improper validation vulnerability in the acceptinvitation endpoint that creates user accounts before captcha validation is enforced. Attackers can bypass captcha protection by sending POST requests with invalid captcha tokens to create unwanted accounts and burn...

6.9CVSS5.9AI score0.00377EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/10 12:00 a.m.•28 views

PT-2026-57172

Capgo before 12.128.2 contains an improper validation vulnerability in the accept invitation endpoint that creates user accounts before captcha validation is enforced. Attackers can bypass captcha protection by sending POST requests with invalid captcha tokens to create unwanted accounts and burn...

6.9CVSS5.9AI score0.00377EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/09 8:54 p.m.•20 views

Improper Validation of Specified Type of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via the period parameter in the recentchanges action when user input is not properly validated before being interpolated into a SQL query. An attacker can access arbitrary database content ...

7.1CVSS5.9AI score0.00379EPSS
SaveExploits0References3
PyPA
PyPA
•added 2026/07/09 4:49 p.m.•28 views

OpenStack Keystone and other components vulnerable to Improper Certificate Validation

HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates...

5.9CVSS6.2AI score0.0097EPSS
SaveExploits1References14Affected Software1
Rows per page
Query Builder