CVE-2025-34068

An unauthenticated remote command execution vulnerability exists in Samsung WLAN AP WEA453e firmware prior to version 5.2.4.T1 via improper input validation in the “Tech Support” diagnostic functionality. The command1 and command2 POST or GET parameters accept arbitrary shell commands that are...

CVE-2025-20288

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery SSRF attack through an affected device. This vulnerability is due to improper input validation for specific HTTP...

PT-2025-29857 · Cisco · Cisco Unified Intelligence Center

Name of the Vulnerable Software and Affected Versions: Cisco Unified Intelligence Center affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a server-side request forgery SSRF attack. This...

Atlassian Jira Service Management Data Center and Server 5.12.x < 5.12.23 / 10.2.x < 10.3.6 / 10.4.x < 10.6.1 (JSDSERVER-16260)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16260 advisory. - Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid...

Apache Tomcat 9.0.76 < 9.0.104 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 9.0.104. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat9.0.104security-9 advisory. - Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid...

CVE-2025-53471

Emerson ValveLink products contain an input validation flaw where received data is not properly validated, potentially causing unsafe or incorrect data processing. The CVE notes a local, high-complexity impact with no privileges required (CVSS 3.1/5.1 and CVSS 4.0/5.9). The Red Hat/NVD/CVE lineag...

CVE-2025-53471 Emerson ValveLink Products Improper Input Validation

Emerson ValveLink products receive input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly...

CVE-2025-24005

A local attacker with a local user account can leverage a vulnerable script via SSH to escalate privileges to root due to improper input validation...

PT-2025-29140 · Riverbed · Riverbed Steelhead Vcx

Name of the Vulnerable Software and Affected Versions: Riverbed SteelHead VCX versions 9.6.0a Description: A path traversal vulnerability exists due to improper input validation in the log filtering functionality exposed via the management web interface. An authenticated attacker can exploit this...

Improper Input Validation

transformers is vulnerable to improper input validation. The vulnerability is due to insecure URL validation using the startswith method in imageutils.py, which allows an attacker to exploit URL username injection to craft deceptive URLs that appear to originate from trusted sources like YouTube,...

CVE-2025-27367

CVE-2025-27367 affects IBM OpenPages with Watson versions 8.3 through 9.0. The issue is described as improper input validation where an authenticated user can bypass client-side validation for GRC Object fields and craft a payload that allows data to be saved without required fields being stored....

CVE-2025-27367 IBM OpenPages with Watson improper input validation

IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to improper input validation due to bypassing of client-side validation for the data types and requiredness of fields for GRC Objects when an authenticated user sends a specially crafted payload to the server allowing for data to be saved withou...

CVE-2025-47982

Improper input validation in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...

Microsoft SQL Server Information Disclosure Vulnerability

Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network...

CVE-2025-24005 Local Privilege Escalation via Vulnerable SSH Script

A local attacker with a local user account can leverage a vulnerable script via SSH to escalate privileges to root due to improper input validation...

Denial Of Service (DoS)

mcp is vulnerable to improper input validation. The vulnerability is due to a validation error when processing malformed requests, which allows an attacker to trigger unhandled exceptions and cause service unavailability 500 errors until the service is manually restarted...

Siemens SCALANCE, RUGGEDCOM Third-Party Improper Input Validation (CVE-2021-26401)

LFENCE/JMP mitigation V2-2 may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503283;...

PT-2025-28343 · Phoenix Contact · Charx Sec-3000 +7

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A local attacker with a local user account can leverage a vulnerable script via SSH to escalate privileges to root due to improper input validation. Recommendations: At the moment, there is ...

Improper Validation of Syntactic Correctness of Input

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input via improper handling of user-supplied URLs by using the startswith method in imageutils.py. An...

webkitgtk: memory disclosure issue was addressed with improved memory handling

A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution...