1560 matches found
The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.
The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...
CVE-2025-59607 Untrusted Pointer Dereference in Windows Compute
Memory Corruption when copying large input data exceeds normal allocation limits...
CVE-2025-59607
CVE-2025-59607 is an Untrusted Pointer Dereference vulnerability in Qualcomm Windows Compute , where memory corruption occurs when copying large input data that exceeds normal allocation limits. The flaw is rated HIGH (CVSS 7.8) with a local attack vector, low complexity, and low privileges requi...
Astra Linux – Vulnerability in xorg-server
In the X.Org X Server versions 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, which is known as a race condition. Specifically, the AttachDevice function in...
CVE-2026-11838
Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...
CVE-2026-11838 Improper Authorization in Yordam Informatics' Library Reservation System
Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...
CVE-2026-11838 Improper Authorization in Yordam Informatics' Library Reservation System
Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...
CVE-2026-11838
CVE-2026-11838 is a missing authentication vulnerability in the Library Reservation System developed by Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. The flaw allows input data manipulation in a critical function that lacks proper access contro...
EUVD-2026-74781
Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...
CVE-2026-16025 Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module
Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Input Data Manipulation. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...
EUVD-2026-70657
Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...
CVE-2026-78583 Incorrect Authorization in Kibana Leading to Privilege Escalation
Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...
CVE-2026-72644
CVE-2026-72644 is a denial-of-service vulnerability in Kibana (Elastic). An authenticated user with only low-privileged access to the Observability AI Assistant can submit a specially crafted request that triggers an uncaught exception (CWE-248), terminating the Kibana process and denying service...
CVE-2026-72644 Uncaught Exception in Kibana Leading to Denial of Service
Uncaught Exception CWE-248 in Kibana can lead to a denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only the low-privileged feature access required to use the Observability AI Assistant can submit a specially crafted request that produces an unhandled error...
CVE-2026-72644 Uncaught Exception in Kibana Leading to Denial of Service
Uncaught Exception CWE-248 in Kibana can lead to a denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only the low-privileged feature access required to use the Observability AI Assistant can submit a specially crafted request that produces an unhandled error...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: thrift (UTSA-2026-032286)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032286 advisory. In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had...
Astra Linux - Vulnerability in node-sha.js
There is a vulnerability in input validation in sha.js that allows for manipulation of input data. This issue affects sha.js version 2.4.11...
CVE-2026-13202
A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2...