203485 matches found
PT-2026-91484
Name of the Vulnerable Software and Affected Versions iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 Description A memory corruption issue exists where processing a maliciously crafted file may lead to unexpected app termination. This was addressed by...
ROS-20260914-73-0125
The vulnerability of the Input component in Google Chrome and Microsoft Edge is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns lies in its lack of mechanisms to neutralize specific elements, allowing a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the command-line interface of the PAN-OS operating system, allowing a perpetrator to execute arbitrary commands
The vulnerability of the command-line interface of the PAN-OS operating system is related to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands on behalf of the root user...
CVE-2026-4103: Improper Neutralization of Input During Web Page Generation
Insufficient HTML sanitization in the Publisher Portal and Developer Portal allows untrusted user input to be rendered without proper encoding or neutralization. This enables the injection and execution of malicious JavaScript when affected API documents are viewed. Successful exploitation may...
ROS-20260914-73-0056
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
ROS-20260914-73-0067
The vulnerability of the Web Share component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
ROS-20260914-73-0122
The vulnerability of the New Tab Page component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
ROS-20260914-73-0078
The vulnerability of Google Chrome and Microsoft Edge web browsers relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
ROS-20260914-73-0102
The vulnerability of Google Chrome’s user interface is related to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor to bypass security measures by using a specially created HTML page...
CVE-2026-82441: Improper Input Validation
Description A submitted topology carries two lists of blobstore keys, dependencyjars and dependencyartifacts, which the client fills in after uploading the corresponding blobs. Nimbus performed no validation of their contents on the submission path, yet acts on them in two places. During cleanup ...
CVE-2026-86885: Improper Input Validation
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...
CVE-2026-57130: Improper Input Validation
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, src/praisonai-agents/praisonaiagents/tools/emailtools.py interpolates LLM-controlled fromaddr, subject, and query values directly into quoted IMAP SEARCH criteria. Embedded quote, backslash, newline, or null characters can...
PT-2026-91663
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7 iPadOS versions prior to 26.7 iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 tvOS versions prior to...
PT-2026-91709
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7 iPadOS versions prior to 26.7 iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 macOS Tahoe versions prior to 26.7 Description A memory corruption issue exists where connecti...
PT-2026-91681
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. A remote attacker may be able to cause a denial-of-service...
PT-2026-91505
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to read arbitrary files...
Debian dla-4779 : jbig2dec - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4779 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4779-1 [email protected] https://www.debian.org/lts/security/...
PT-2026-91602
Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description An input validation issue exists where an application may be able to access restricted files. This was addressed by...
PT-2026-91222
Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the toggleCategoryPromotionAction method. The module inserts value of the POST parameter "status" into SQL UPDATE queries without any sanitization or validation. An attacker with access to the product or...