CVE-2025-59570

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through = 1.18.6...

CVE-2025-53458

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in davaxi Goracash goracash allows Stored XSS.This issue affects Goracash: from n/a through = 1.1...

CVE-2025-52906

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360B20241207...

CVE-2025-52907

CVE-2025-52907 concerns TOTOLINK X6000R, a Wi‑Fi 6 router. The connected sources describe an improper input validation vulnerability in the device’s software stack that can enable command injection and file manipulation. The affected release range is X6000R through version V9.4.0cu.1360_B20241207...

CVE-2025-47314 Improper Input Validation in Automotive Software platform based on QNX

Memory corruption while processing data sent by FE driver...

CVE-2025-47314 Improper Input Validation in Automotive Software platform based on QNX

Memory corruption while processing data sent by FE driver...

CVE-2025-47314

The CVE-2025-47314 issue affects an Automotive Software platform based on QNX used in Qualcomm chipsets. The root cause reported is memory corruption encountered when processing data sent by the FE driver. The vulnerability is described with a CVSSv3.1 base score of 7.8 (HIGH) and an attack vecto...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via the process handling incoming requests. An attacker can cause the service to become unresponsive by sending specially crafted input. Remediation Upgrade org.apache.iotdb:iotdb-core to version 2.0.5 or highe...

CVE-2025-8079

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. Smart Trade E-Commerce allows Reflected XSS.This issue affects Smart Trade E-Commerce: before 4.5.0.0.1...

The vulnerability of the Go programming language, related to improper validation of input data, allows attackers to exploit their privileges.

The vulnerability of the Go programming language is related to improper validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain increased privileges...

Cisco IOS 安全漏洞

Cisco IOS is a set of operating systems developed by the American company Cisco for its network devices. A security vulnerability exists in Cisco IOS that stems from improper input validation and could lead to a denial of service attack...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a Wi-Fi 6 technology-enabled wireless router from China's Gion Electronics TOTOLINK, featuring high concurrent connections and dual-band transmission. The TOTOLINK X6000R suffers from an OS command injection vulnerability that stems from a failure to properly filter special...

CVE-2024-21935

Improper input validation in Satellite Management Controller SMC may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root directory, potentially resulting in data corruption...

CVE-2024-21927

Improper input validation in Satellite Management Controller SMC may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service processes like OpenBMC to crash and reset, potentially resulting in denial of service...

CVE-2025-52905

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360B20241207...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router supporting Wi-Fi 6 technology from China's Gion Electronics TOTOLINK, focusing on high concurrent connections and dual-band transmission capabilities. The TOTOLINK X6000R suffers from an improper input validation vulnerability, which can be exploited by...

Adobe Commerce/Magento Open Source Improper Input Validation (APSB25-88)

The version of Adobe Commerce/Magento Open Source installed on the remote host it is, therefore, affected by a vulnerability as referenced in the APSB25-88 advisory. - Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper...

Adobe Commerce B2B Improper Input Validation (APSB25-88)

The version of Adobe Commerce B2B installed on the remote host it is, therefore, affected by a vulnerability as referenced in the APSB25-88 advisory. - Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validatio...

CVE-2025-59590

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through = 3.28...

CVE-2025-59569

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Stored XSS.This issue affects CubeWP: from n/a through = 1.1.26...