Lucene search
K

6726 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.5 views

Hanwha Vision Camera Improper Input Validation (CVE-2025-52600)

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems ICS and OT/IoT security, has discovered a vulnerability in camera video analytics that Improper input validation. This vulnerability could allow an attacker to execute specific commands on the...

7.2CVSS8.5AI score0.00033EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/15 11:25 p.m.4 views

CVE-2021-47785

Ether MP3 CD Burner 1.3.8 contains a buffer overflow vulnerability in the registration name field that allows remote code execution. Attackers can craft a malicious payload to overwrite SEH handlers and execute a bind shell on port 3110 by exploiting improper input validation...

9.8CVSS6.5AI score0.00107EPSS
Exploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2026/01/15 3:31 p.m.10 views

Keycloak has an improper input validation vulnerability

A flaw was found in Keycloak. This improper input validation vulnerability occurs because Keycloak accepts RFC-compliant matrix parameters in URL path segments, while common reverse proxy configurations may ignore or mishandle them. A remote attacker can craft requests to mask path segments,...

3.7CVSS6.6AI score0.00015EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.3 views

PT-2026-2984

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in Keycloak related to improper input validation. The software accepts RFC-compliant matrix parameters within URL path segments, which may be ignored or mishandled by common...

3.7CVSS6.3AI score0.00015EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2026/01/14 9:18 p.m.9 views

chi has an open redirect vulnerability in the RedirectSlashes middleware

Summary The RedirectSlashes function in middleware/strip.go does not perform correct input validation and can lead to an open redirect vulnerability. Details The RedirectSlashes function performs a Trim to all forward slash / characters, while prepending a single one at the begining of the path...

6.7AI score
Exploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/14 7:25 p.m.2 views

CVE-2026-21268

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

8.6CVSS7.6AI score0.00044EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 7:25 p.m.2 views

CVE-2026-21272

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could leverage this vulnerability to manipulate or inject malicious data into files on the system. Exploitation of this issue requir...

8.6CVSS6.7AI score0.00031EPSS
Exploits0References1
CNVD
CNVD
added 2026/01/14 12:0 a.m.3 views

Delta Electronics DVP-12SE11T Improper Input Validation Vulnerability

Delta Electronics DVP-12SE11T is a networked mainframe from Delta Electronics China. The Delta Electronics DVP-12SE11T suffers from an improper input validation vulnerability that can be exploited by an attacker to cause a denial of service...

7.5CVSS6AI score0.0012EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/01/13 10:52 p.m.4 views

CVE-2026-20976

Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script...

7.8CVSS7.1AI score0.00012EPSS
Exploits0References1
OSV
OSV
added 2026/01/13 9:31 p.m.2 views

GHSA-W2GR-585J-R428 Metricbeat affected by multiple denial of service vulnerabilities

Improper Validation of Array Index CWE-129 exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation CAPEC-153 via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input...

6.5CVSS5.5AI score0.00069EPSS
Exploits0References6
OSV
OSV
added 2026/01/13 9:15 p.m.2 views

CVE-2026-0543

Improper Input Validation CWE-20 in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation CAPEC-130 through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector...

6.5CVSS5.8AI score
Exploits0References1
Cvelist
Cvelist
added 2026/01/13 9:10 p.m.22 views

CVE-2026-0543 Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation

Improper Input Validation CWE-20 in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation CAPEC-130 through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector...

6.5CVSS0.0008EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/13 9:10 p.m.3 views

EUVD-2026-2035

Improper Input Validation CWE-20 in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation CAPEC-130 through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector...

6.5CVSS6.3AI score0.0008EPSS
Exploits0References2
NVD
NVD
added 2026/01/13 7:16 p.m.4 views

CVE-2026-21272

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could leverage this vulnerability to manipulate or inject malicious data into files on the system. Exploitation of this issue requir...

8.6CVSS0.00031EPSS
Exploits0References1
NVD
NVD
added 2026/01/13 7:16 p.m.5 views

CVE-2026-21268

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

8.6CVSS0.00044EPSS
Exploits0References1
NVD
NVD
added 2026/01/13 7:16 p.m.4 views

CVE-2026-21271

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

8.6CVSS0.00044EPSS
Exploits0References1
OSV
OSV
added 2026/01/13 7:16 p.m.1 views

CVE-2026-21268

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

8.6CVSS6.3AI score0.00044EPSS
Exploits0References1
OSV
OSV
added 2026/01/13 7:16 p.m.1 views

CVE-2026-21272

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could leverage this vulnerability to manipulate or inject malicious data into files on the system. Exploitation of this issue requir...

8.6CVSS5.9AI score0.00031EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/13 6:25 p.m.5 views

CVE-2026-21271 Dreamweaver Desktop | Improper Input Validation (CWE-20)

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

8.6CVSS7.3AI score0.00044EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/13 6:25 p.m.18 views

CVE-2026-21271 Dreamweaver Desktop | Improper Input Validation (CWE-20)

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

8.6CVSS0.00044EPSS
Exploits0References1
Rows per page
Query Builder