209631 matches found
The vulnerability of the l2tp_xmit_core() function in the net/l2tp/l2tp_core.c module, which is part of the Linux operating system’s Layer 2 Tunneling Protocol core, allows a attacker to cause a service failure.
The vulnerability of the l2tpxmitcore function in the net/l2tp/l2tpcore.c module, which is part of the Linux L2TP protocol implementation, is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Email Verification / SMS Verification / OTP Verification - Critical - Access Bypass - SA-CONTRIB-2026-124
This module enables you to add extra layer of verification for user registration. The module doesn't sufficiently validate user-supplied input resulting in an account takeover vulnerability...
Media Library Importer - Moderately critical - Access bypass - SA-CONTRIB-2026-129
A module to import media files into media library. The import folder is a plain textfield with no validation. Point it at any directory the web user can read, and the importer copies every file whose extension matches a selected media type into the public files directory and publishes it as a Med...
PT-2026-84899
This module enables you to add an extra layer of verification for user registration. The module doesn't sufficiently filter user-supplied input before output, resulting in an unauthenticated reflected Cross-site Scripting XSS vulnerability...
Email Verification / SMS Verification / OTP Verification - Critical - Cross Site Scripting - SA-CONTRIB-2026-125
This module enables you to add an extra layer of verification for user registration. The module doesn't sufficiently filter user-supplied input before output, resulting in an unauthenticated reflected Cross-site Scripting XSS vulnerability...
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers allows a perpetrator to compromise data integrity.
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...
The vulnerability of the NetworkCache component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.
The vulnerability of the NetworkCache component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
The vulnerability of the Cast component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Cast component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
The vulnerability of the Enterprise web browsers Google Chrome and Microsoft Edge allows a hacker to trigger a service failure.
The vulnerability of the Enterprise web browsers Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the web interface of the Microprogramming Software-based Blurams Lumi Security Camera A31C allows a intruder to execute arbitrary code.
The vulnerability of the web interface of the Microprogramming Software-based Blurams Lumi Security Camera A31C relates to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a intruder to execute arbitrary code...
The vulnerability of the amdgpu_userq_input_args_validate() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c source file of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the amdgpuuserqinputargsvalidate function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserq.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to incorrect input validation. Exploiting this vulnerability can...
The vulnerability of the DevTools component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Password component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the integrated security management platform Hikvision CSMP iSecure Center, which stems from the failure to take measures to neutralize specific elements, allows attackers to execute arbitrary commands.
The vulnerability of the integrated security management platform Hikvision CSMP iSecure Center lies in the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands in JSON data...
The vulnerability of the Chromecast web browsers Google Chrome and Microsoft Edge allows a hacker to trigger a service failure.
The vulnerability of Google Chrome and Microsoft Edge web browsers relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
The vulnerability of the AI assistant Gemini (previously known as GLIC (Gemini Live in Chrome)) in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.
The vulnerability of the AI assistant Gemini previously known as GLIC Gemini Live in Chrome in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
PT-2026-84891
This module enables you use UI Patterns with blocks, for use in Layout Builder. The module doesn't sufficiently validate user input before passing to token replacement. This vulnerability is mitigated by the fact that an attacker must have a role with the ability to edit layout builder layouts...
