CVE-2026-21549

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2026-21548

In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed...

EUVD-2026-52229

In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed...

CVE-2026-12259 Improper Input Validation in nltk/nltk

In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation in the calculateAgreementpub, message method of the DHAgreement class, which raises the peer-supplied message to the power of the local static private key x without any range or subgroup-membership check, while...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation in the calculateAgreementpub, message method of the DHAgreement class, which raises the peer-supplied message to the power of the local static private key x without any range or subgroup-membership check, while...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation in the calculateAgreementpub, message method of the DHAgreement class, which raises the peer-supplied message to the power of the local static private key x without any range or subgroup-membership check, while...

CVE-2026-67969: Improper Input Validation

An issue in the HSMonitorApplications component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a crafted HS.AppMonTbl entry...

CVE-2026-69185: Improper Input Validation

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 4.2.7, 3.4.5, and 3.3.6, a specially crafted Socket.IO packet can make the server wait for a large number of binary attachments and buffer them, which can be exploited to make the server run out of memory...

CVE-2026-21555: Improper Input Validation

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2026-21553: Improper Input Validation

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2026-21552: Improper Input Validation

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2026-21550: Improper Input Validation

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2026-21549: Improper Input Validation

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2026-21548: Improper Input Validation

In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed...

CVE-2026-20469: Write-what-where Condition

In trustedmem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: AUTO00834868; Issue ID: MSV-6533...

CVE-2026-59650: Improper Input Validation

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

CVE-2026-21551: Improper Input Validation

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2026-21554: Improper Input Validation

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2026-69192: Improper Input Validation

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inetaton, and getaddrinfo all decode a leading zero as octal. The library...