7282 matches found
Improper Input Validation
Apache Camel Salesforce is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of Salesforce control headers, where attacker-controlled HTTP headers can override configured SOQL queries, SObject parameters, or Apex REST requests, allowing unauthorized acce...
Linux Distros Unpatched Vulnerability : CVE-2026-20901
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privilege...
PT-2026-71299
Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 IBM Verify Identity Access Container versions 11.0 through 11.0.3 Description Improper validation of user supplied input may allo...
Cisco IOS XE Software Security Hardening Release: August 2026 (cisco-sa-hardening-iosxe-V8NMuMZJ)
According to its self-reported version, Cisco IOS-XE Software is affected by multiple vulnerabilities. - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review...
Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in SQL
Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17111, CVE-2026-17110, CVE-2026-17109, CVE-2026-17420, CVE-2026-17222, CVE-2026-17419, CVE-2026-17418 in SQL as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17111 DESCRIPTION: IBM i is...
CVE-2026-18699 Improper Input Validation in MongoDB Query Planner Leads to Denial of Service
An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specially formed query against a collection with a text index. This could result in a denial of service, affecting connecte...
CVE-2026-18699
Technical details about CVE-2026-18699 are not publicly available in the provided documents. Monitor for updates from official advisories.
Improper Input Validation in MongoDB Query Planner Leads to Denial of Service
An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specially formed query against a collection with a text index. This could result in a denial of service, affecting connecte...
CVE-2026-18697 Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos
An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the...
CVE-2026-18695 Improper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service
An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write access to cause the server process to terminate unexpectedly, resulting in a denial of service...
CVE-2026-18695
CVE-2026-18695 affects MongoDB Server, specifically time-series collections that use a metaField. The issue occurs in how certain query predicates are processed, and an authenticated user with write access can cause the server process to terminate unexpectedly, resulting in a denial of service. T...
CVE-2026-18707 Improper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service
An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service...
CVE-2026-18707
The CVE-2026-18707 entry concerns MongoDB Server where an authenticated user (even one with minimal privileges) can trigger a denial of service by submitting a specially crafted aggregation command that causes the server process to terminate. The available documents identify the affected product ...
CVE-2026-20901
Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...
CVE-2026-20901
Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...
CVE-2026-20901
CVE-2026-20901 concerns firmware input validation issues in some Intel Xeon processors. The root cause is improper input validation in startup code and SMM pathways, creating a pathway for a local attacker with privileged access and a high-complexity attack to alter data. The exploit requires loc...
CVE-2026-71390
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user...
CVE-2026-70323
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...