210667 matches found
CVE-2026-53541: Improper Input Validation
OliveTin gives access to predefined shell commands from a web interface. The filterToDefinedArgumentsOnly function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a specia...
CVE-2026-77391: Cross-Site Request Forgery (CSRF)
A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit has been released to the public and may be...
CVE-2026-65645: Improper Input Validation
Rocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6. 8.3.8, 8.2.8, 8.1.8, and 7.10.15, the Meteor DDP methods getThreadsList and getThreadMessages accept rid / tmid as raw, untyped parameters with no schema validation. A MongoDB operator object e.g. "$gt": "4" can be substituted for ...
ROS-20260821-73-0066
The vulnerability of the jbd2journaltryremovecheckpoint function in the fs/jbd2/checkpoint.c file of the Linux kernel operating system is related to data loss due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of protect...
PT-2026-79456
Name of the Vulnerable Software and Affected Versions Phalcon versions prior to 5.16.0 Description The resolveFilter function in phalcon/Mvc/View/Engine/Volt/Compiler.zep constructs the join filter by inserting raw separator and array token values into generated PHP without using the expression...
PT-2026-79355
Name of the Vulnerable Software and Affected Versions io.micrometer:micrometer-registry-statsd affected versions not specified io.micrometer:micrometer-core affected versions not specified Description Failure to sanitize newline characters , r in metrics data allows for injection and spoofing...
CVE-2026-77710: Improper Input Validation
A vulnerability in misp-stix could allow a crafted STIX document to influence security-sensitive MISP attribute metadata during import. The STIX import logic automatically selected between the internal MISP parser and the external STIX parser based on metadata contained in the STIX document itsel...
PT-2026-79409
Name of the Vulnerable Software and Affected Versions UAC Unix-like Artifacts Collector versions prior to 3.3.0 Description A command injection issue exists in the command collector function. The software substitutes command output lines directly into command strings using sed without proper...
ROS-20260821-73-0054
The vulnerability in the include/media/v4l2-mem2mem.h header file of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-79380
Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo 4.1.66 - User supplied input in comments and user supplied field elements weren't escaped, leading to a stored XSS vector...
PT-2026-79303
Name of the Vulnerable Software and Affected Versions Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin versions prior to 5.0.14 Description The plugin fails to validate a client-supplied payment amount against the vendor's actual outstanding balance during the...
CVE-2026-16520
Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL Injection and Authentication Bypass. This issue affects Genian NAC V4.0: from 4.0.0 before 4.0.175Revisio...
CVE-2026-16520
Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL Injection and Authentication Bypass. This issue affects Genian NAC V4.0: from 4.0.0 before 4.0.175Revisio...
CVE-2026-16520
Genians Genian NAC V4.0, V5.0, and Genian ZTNA V6.0 contain improper input validation enabling SQL injection and authentication bypass (CVSS 8.7 HIGH). Affected versions: NAC V4.0 before 4.0.175, V5.0 before 5.0.88, ZTNA V6.0 before 6.0.48. No in-the-wild exploitation reported. Patch to the liste...
MINI-7PQM-R477-QRGF
Bulletin has no description...
MINI-97J9-9XG9-XCV9
Bulletin has no description...
MINI-267M-2PFX-H2RH
Bulletin has no description...
MINI-FR96-652M-W9J2
Bulletin has no description...