11326 matches found
CVE-2025-24062
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2025-24058
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2025-24060
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2025-24058
CVE-2025-24058 describes an elevation-of-privilege in the Windows DWM Core Library caused by improper input validation. The vulnerability enables a locally authenticated attacker to escalate privileges (local vector, no user interaction required per CVSS: High, with base score 7.8). Connected sou...
CVE-2025-24073
CVE-2025-24073 affects the Windows DWM Core Library and stems from improper input validation, enabling a locally authorized attacker to elevate privileges. The vulnerability is described with a base CVSS v3.1 score of 7.8 (High) and local attack vector with low complexity, requiring low privilege...
CVE-2025-26686 Windows TCP/IP Remote Code Execution Vulnerability
...
Improper Input Validation
Overview shopware/platform is a Shopware e-commerce core. Affected versions of this package are vulnerable to Improper Input Validation via the password length. This is by submitting excessively long passwords through Storefront forms or Store-API. Remediation Upgrade shopware/platform to version...
Improper Input Validation
Overview shopware/core is a Shopware platform is the core for all Shopware ecommerce products. Affected versions of this package are vulnerable to Improper Input Validation via the password length. This is by submitting excessively long passwords through Storefront forms or Store-API. Remediation...
Azure Local Elevation of Privilege Vulnerability
Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally...
PT-2025-15685 · Schneider Electric · Connexium Network Manager
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A vulnerability exists due to improper input validation, potentially causing a loss of confidentiality, integrity, and availability when a malicious project file is loaded by a user from the...
Rockwell Automation Arena 安全漏洞
Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...
PT-2025-15662 · Adobe · Coldfusion
Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.0 and earlier ColdFusion versions 2023.12 ColdFusion versions 2021.18 Description: The issue is related to an Improper Input Validation that could result in a security feature bypass. An attacker could leverage this t...
PT-2025-15590 · Microsoft · Office Word +1
Name of the Vulnerable Software and Affected Versions: Microsoft Office Word affected versions not specified Description: The issue is related to improper input validation in Microsoft Office Word, which allows an unauthorized attacker to bypass a security feature over a network. Recommendations:...
PT-2025-15487 · Microsoft · Windows Dwm Core Library +1
Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library affected versions not specified Description: The issue is related to improper input validation, which allows an authorized attacker to elevate privileges locally. This could potentially lead to unauthorized access and...
Rockwell Automation Arena 缓冲区错误漏洞
Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...
Fortinet FortiIsolator 操作系统命令注入漏洞
Fortinet FortiIsolator is a Fortinet application that provides remote security isolation for browsers. The application adds additional advanced threat protection capabilities to the Fortinet Security Fabric and protects business-critical data from sophisticated threats on the Web. Content and fil...
PT-2025-15644 · Adobe · Coldfusion
Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier Description: The issue is related to improper input validation, which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires us...
CVE-2025-20657
In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09486425; Issue ID: MSV-2609...
CVE-2025-20659
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...
