Lucene search
K

6728 matches found

Veracode
Veracode
added 2025/11/26 11:48 p.m.5 views

Improper Input Validation

OpenVPN is vulnerable to Improper Input Validation. The vulnerability is due to improper validation of source IP addresses during session handling, which allows an attacker to open a session from a different IP address than the one that initiated the connection and cause a denial of service for t...

8.2CVSS6.8AI score0.00052EPSS
Exploits0References8Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/26 5:47 p.m.4 views

CVE-2025-64126 Zenitel TCIV-3+ OS Command Injection

An OS command injection vulnerability exists due to improper input validation. The application accepts a parameter directly from user input without verifying it is a valid IP address or filtering potentially malicious characters. This could allow an unauthenticated attacker to inject arbitrary...

10CVSS7.3AI score0.08316EPSS
Exploits0References3
Veracode
Veracode
added 2025/11/25 10:5 a.m.4 views

Improper Input Validation

thorsten/phpmyfaq is vulnerable to improper input validation. The vulnerability is due to the application's failure to enforce unique email addresses during registration, which allows an attacker to create multiple accounts with the same email and potentially exploit this for account ambiguity,...

9.8CVSS7.1AI score0.00061EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2025/11/25 12:0 a.m.2 views

Hcl Inotes 安全漏洞

HCL Hcl Inotes is a software from HCL India that allows management of IBMDomino emails, scheduling of errands and other office activity management. A security vulnerability exists in Hcl Inotes that stems from improper validation of user input and could lead to a reflective cross-site scripting...

8.1CVSS6AI score0.00027EPSS
Exploits0References2
EUVD
EUVD
added 2025/11/24 9:31 p.m.3 views

EUVD-2025-198997

Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service...

5.5CVSS6AI score0.00032EPSS
Exploits0References2
EUVD
EUVD
added 2025/11/24 9:30 p.m.3 views

EUVD-2025-198985

Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in crash or denial of service...

7.3CVSS6.3AI score0.00029EPSS
Exploits0References2
NVD
NVD
added 2025/11/24 9:16 p.m.2 views

CVE-2025-52538

Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in loss of confidentiality or availability...

8CVSS0.00017EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/24 9:3 p.m.8 views

CVE-2025-29933

Improper input validation within AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service...

5.5CVSS0.00028EPSS
Exploits0References1
Snyk
Snyk
added 2025/11/24 4:46 p.m.1 views

Improper Validation of Specified Type of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via the NudmSubscriberDataManagement API. An attacker can disrupt service availability by sending crafted requests to this API endpoint. Remediation Upgrade...

7.1CVSS6.6AI score0.00162EPSS
Exploits0References2
Veracode
Veracode
added 2025/11/24 6:58 a.m.4 views

Improper Input Validation

auth0/wordpress is vulnerable to Improper Input Validation. The vulnerability is due to the Bulk User Import endpoint not validating the file path wrapper or value, which allows an attacker to supply arbitrary file paths or URLs to manipulate file handling behavior...

3.3CVSS7.1AI score0.00102EPSS
Exploits0References8Affected Software2
Positive Technologies
Positive Technologies
added 2025/11/24 12:0 a.m.5 views

PT-2025-47965

Name of the Vulnerable Software and Affected Versions AMD uProf affected versions not specified Description A flaw exists in AMD uProf due to improper input validation. This can allow a local attacker to write out of bounds, potentially leading to a crash or denial of service. Recommendations At...

5.5CVSS6.2AI score0.00028EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/11/24 12:0 a.m.2 views

AMD uProf 安全漏洞

AMD uProf is a suite of performance analysis tools from AMD for analyzing the performance of x86 architecture applications on Windows, Linux and FreeBSD systems. AMD uProf suffers from an improper input validation vulnerability that can be exploited by an attacker to cause an out-of-bounds write...

5.5CVSS6.9AI score0.00028EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/24 12:0 a.m.2 views

AMD uProf 安全漏洞

AMD uProf is a suite of performance analysis tools from AMD for analyzing the performance of x86 architecture applications on Windows, Linux and FreeBSD systems. AMD uProf suffers from an improper input validation vulnerability that can be exploited by an attacker to write to arbitrary physical...

5.5CVSS6.7AI score0.00032EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/24 12:0 a.m.3 views

PT-2025-47962

Name of the Vulnerable Software and Affected Versions XOCL driver affected versions not specified Description A flaw exists in the XOCL driver due to improper input validation. This can allow a local attacker to trigger an integer overflow. Successful exploitation could lead to a loss of...

8CVSS6.1AI score0.00017EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/11/22 7:15 p.m.6 views

CVE-2025-48502

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service...

5.5CVSS6.6AI score0.00032EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/21 9:30 p.m.3 views

EUVD-2025-198504

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service...

5.5CVSS6.1AI score0.00032EPSS
Exploits0References2
NVD
NVD
added 2025/11/21 7:15 p.m.2 views

CVE-2025-48502

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service...

5.5CVSS0.00032EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/11/21 11:50 a.m.4 views

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Neutralization (CVE-2025-5878)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the improper neutralization vulnerability Vulnerability Details CVEID:CVE-2025-5878 DESCRIPTION: A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface...

7.5CVSS7AI score0.00626EPSS
Exploits1Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/21 12:0 a.m.3 views

PT-2025-47796

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service...

5.5CVSS6.6AI score0.00032EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/21 12:0 a.m.3 views

WordPress plugin Nelio Popups 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-sit...

6.5CVSS5.9AI score0.00029EPSS
Exploits0References1
Rows per page
Query Builder