18667 matches found
PT-2026-92349
Name of the Vulnerable Software and Affected Versions IP Multimedia Subsystem affected versions not specified Description An out-of-bounds write can occur due to improper input validation. This flaw allows for remote code execution without requiring additional execution privileges or user...
CVE-2026-47780: Improper Input Validation
free5GC is an open-source implementation of the 5G core network. In 4.2.3 and earlier, HandleCreateEeSubscriptions and HandleQueryeesubscriptions in free5gc/udr internal/sbi/apidatarepository.go validate the ueId path value with a regular expression whose final .+ alternative accepts every...
CVE-2026-88261: Improper Input Validation
Improper input validation vulnerability in bizwell xClick allows Stored XSS. This issue affects xClick: R2, R3, and R3.1...
CVE-2026-55306: Improper Input Validation
In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-66974: Improper Input Validation
An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...
CVE-2026-57008: Improper Input Validation
In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-92318
Name of the Vulnerable Software and Affected Versions Trusted Execution Environment affected versions not specified Description Improper input validation in the Trusted Execution Environment can lead to memory corruption. This issue allows for local escalation of privilege, requiring System...
PT-2026-92331
In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-78150
IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a STRPCCMD CL command...
CVE-2026-14276 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emulator macro RunProgram action...
CVE-2026-14277
IBM i Access Client Solutions (ACS) , versions 1.1.2.0 through 1.1.9.15 , is affected by an OS command injection vulnerability (CWE-78) caused by improper validation of user-supplied input in a session file . An authenticated user can exploit this to execute arbitrary commands with normal user pr...
CVE-2026-14277 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a session file...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation via the ResizeImageItem::fromObject process. An attacker can cause metadata deserialization and potentially execute arbitrary code by supplying a crafted phar:// path as untrusted input to the |resize filter or...
CVE-2026-76442 Cisco Secure Email Gateway Security Hardening Release
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...
CVE-2026-76442
CVE-2026-76442 affects Cisco Secure Email Gateway and Cisco Secure Email and Web Manager , where multiple internally discovered vulnerabilities stem from improper validation of specified quantity in input (CWE-1284). Cisco rates this HIGH severity (CVSS 7.5) with a network attack vector , no requ...
Improper Input Validation
Overview org.apache.storm:storm-server is a distributed realtime computation system. Affected versions of this package are vulnerable to Improper Input Validation due to the lack of validation on the dependencyjars and dependencyartifacts lists during topology submission. An attacker can cause...
EUVD-2026-77537
An improper input validation vulnerability in Zscaler Client Connector on Android and ChromeOS allows an attacker to potentially bypass Zscaler controls...
CVE-2026-59569 Android ZCC VPN API method privilege escalation
An improper input validation vulnerability in Zscaler Client Connector on Android and ChromeOS allows an attacker to potentially bypass Zscaler controls...
CVE-2026-59569 Android ZCC VPN API method privilege escalation
An improper input validation vulnerability in Zscaler Client Connector on Android and ChromeOS allows an attacker to potentially bypass Zscaler controls...
