1856 matches found
Directum HR Pro Disclosure
The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...
CVE-2026-124034
Relative path traversal in the local hybrid job input data download in Amazon Braket SDK before 1.127.7 might allow a remote authenticated user with S3 write access to a hybrid job's input data location to overwrite arbitrary files with the privileges of the user running the job via crafted S3...
CVE-2026-124034
A relative path traversal vulnerability exists in the Amazon Braket SDK (versions before 1.127.7 ) during the local hybrid job input data download process. A remote authenticated user with S3 write access to a hybrid job's input data location can use crafted S3 object keys to overwrite arbitrary ...
CVE-2026-124034 Path traversal in Amazon Braket SDK local hybrid job input data download
Relative path traversal in the local hybrid job input data download in Amazon Braket SDK before 1.127.7 might allow a remote authenticated user with S3 write access to a hybrid job's input data location to overwrite arbitrary files with the privileges of the user running the job via crafted S3...
EUVD-2026-120499
Relative path traversal in the local hybrid job input data download in Amazon Braket SDK before 1.127.7 might allow a remote authenticated user with S3 write access to a hybrid job's input data location to overwrite arbitrary files with the privileges of the user running the job via crafted S3...
PT-2026-141169
Relative path traversal in the local hybrid job input data download in Amazon Braket SDK before 1.127.7 might allow a remote authenticated user with S3 write access to a hybrid job's input data location to overwrite arbitrary files with the privileges of the user running the job via crafted S3...
CVE-2026-124034: AWS amazon-braket-sdk: Relative path traversal in the local hybrid job input data download in Amazon Braket SDK before 1.127.7 might allow a…
Relative path traversal in the local hybrid job input data download in Amazon Braket SDK before 1.127.7 might allow a remote authenticated user with S3 write access to a hybrid job's input data location to overwrite arbitrary files with the privileges of the user running the job via crafted S3...
CLEANSTART-2026-BL75078 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153)
Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153...
CLEANSTART-2026-CS44060 Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153)
Security vulnerability affects the sonarqube package. Reachable Assertion CWE-617 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153...
ROS-20261027-73-0052
The vulnerability in Tomcat 10 is related to errors in handling length parameters of input data. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
ROS-20261027-73-0053
The vulnerability in Tomcat 11 is related to errors in handling length parameters of input data. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
CLEANSTART-2026-PM70424 Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153)
Security vulnerability affects the sonarqube package. Reachable Assertion CWE-617 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153...
CLEANSTART-2026-OO18479 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153)
Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153...
PT-2026-135160
Security vulnerability affects the sonarqube package. Reachable Assertion CWE-617 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153...
ROS-20261023-73-0102
The vulnerability in libheif is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
PT-2026-135151
Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153...
Google Chrome Microsoft Edge DoS
The vulnerability in the Extensions component of Google Chrome and Microsoft Edge is related to reliance on untrusted input during security decision-making. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...
Splunk Enterprise input validation error vulnerability
Versions prior to Splunk Enterprise 10.4.4 10.4.x, prior to version 10.2.8 10.2.x, prior to version 10.0.11 10.0.x, and prior to version 9.4.16 9.4.x contain an input validation error vulnerability. This vulnerability stems from improper handling of input data...
ROS-20261019-73-0036
The vulnerability in python-ecdsa is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service failures...