11287 matches found
CVE-2025-47096
Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass, allowing a low impact to the integrity of the component. Exploitation of this issue requires user interaction in that a victim must...
CVE-2025-47096
Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass, allowing a low impact to the integrity of the component. Exploitation of this issue requires user interaction in that a victim must...
CVE-2025-47096
Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass, allowing a low impact to the integrity of the component. Exploitation of this issue requires user interaction in that a victim must...
CVE-2025-47096 Adobe Experience Manager | Improper Input Validation (CWE-20)
Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass, allowing a low impact to the integrity of the component. Exploitation of this issue requires user interaction in that a victim must...
CVE-2025-47096
The CVE-2025-47096 entry concerns Adobe Experience Manager (AEM) versions 6.5.22 and earlier affected by an Improper Input Validation vulnerability that can bypass a security feature. Impact is described as low on integrity with no confidentiality/availability impact, and exploitation requires us...
CVE-2025-47096 Adobe Experience Manager | Improper Input Validation (CWE-20)
Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass, allowing a low impact to the integrity of the component. Exploitation of this issue requires user interaction in that a victim must...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation due to the improper validation of user-supplied low-order points during the Diffie-Hellman key exchange process. An attacker can compromise session security by forcing the identity point. Additionally, incorrec...
CVE-2025-0051
Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service...
CVE-2025-47171
Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally...
CVE-2025-33112
IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input...
CVE-2025-27242
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input...
CVE-2025-27131
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input...
Denial Of Service (DoS)
github.com/pion/interceptor is vulnerable to Denial of Service DoS. The vulnerability is due to improper input validation in the RTP packet factory that fails to correctly validate padding length, allowing crafted RTP packets to trigger a panic in Pion-based SFUs...
CVE-2025-3116
Summary: CVE-2025-3116 involves an input validation weakness in Schneider Electric Modicon Controllers (M241/M251/M258/LMC058/M262, per multiple reports) that can allow a Denial of Service when an authenticated user sends a specially crafted HTTPS request with improperly formatted body data to th...
CVE-2025-3898
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends HTTPS request containing invalid data type to the webserver...
PT-2025-25156
Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.22 and earlier Description The issue is related to an Improper Input Validation that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, whe...
Avaya Call Management System 安全漏洞
Avaya Call Management System is an integrated analytics and reporting solution from Avaya, Inc. that keeps you informed about virtually everything. A security vulnerability exists in Avaya Call Management System version 18.x, 19.x prior to 19.2.0.7, and 20.x prior to 20.0.1.0, which stems from...
WordPress plugin MyStyle Custom Product Designer SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
WordPress plugin Backup and Staging by WP Time Capsule 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Backup and Staging by WP Time Capsule plugin that stems from improper input neutralization and can be exploited by a...
WordPress plugin WBW Product Table PRO SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...