IBM WebSphere Application Server - Liberty input validation error vulnerability

IBM WebSphere Application Server – Versions 17.0.0.3 through 26.0.0.10 contain an input validation error vulnerability that allows remote attackers to carry out phishing attacks...

IBM ContextForge MCP Gateway input validation error vulnerability

Versions 1.0.0 through 1.0.11 of IBM ContextForge MCP Gateway contain an input validation error vulnerability. This vulnerability stems from improper slug normalization, which can lead to tool name conflicts and may allow remote authenticated attackers to cause a denial of service...

Hickory DNS input validation error vulnerability

Versions prior to Hickory DNS hickory-proto 0.26.0-beta.1 and Hickory DNS hickory-net 0.26.2 contain an input validation error vulnerability. This vulnerability arises because verifyrrsets disregards DNS classes when splitting RRsets; non-IN records are skipped from signature verification but are...

Hickory DNS input validation error vulnerability

Hickory DNS hickory-proto versions 0.26.0-alpha.1 and earlier, as well as Hickory DNS hickory-net versions 0.26.0-beta.1 through 0.26.2, contain an input validation error vulnerability stemming from a flaw in NSEC validation. When the Next Domain Name in NSEC is a strict descendant of the query...

Kubeflow pipeline input validation error vulnerability

Versions of Kubeflow Pipelines prior to 2.18.0 contain a security vulnerability. This vulnerability stems from changes in the webhook and cache server storage path hashing mechanism for older V1/raw-Argo execution caches. Specifically, Kubernetes namespaces are not included in these hashes; only...

MariaDB Server input validation error vulnerability

A input validation error vulnerability exists in MariaDB Server versions from 10.11.1 up to and including 10.11.19, from 11.4.1 up to and including 11.4.13, from 11.8.1 up to and including 11.8.9, from 12.3.1 up to and including 12.3.3, and from 13.0.1 up to and including 13.0.2. This vulnerabili...

NPC Worldwide npcpy input validation error vulnerability

NPC Worldwide npcpy versions 2.1.27 and earlier contain an input validation error vulnerability. This vulnerability stems from improper handling of the ‘model’ parameter in the getmlxresponse function within the file npcpy/gen/response.py in the MLX Provider component, resulting in insufficient...

Pocket ID input validation error vulnerability

Versions 2.2.0 through 2.12.0 of Pocket ID contain an input validation error vulnerability. This arises because email verification tokens are tied solely to user identifiers; when changing an account’s email address, the token is not invalidated. As a result, regular users can exchange old tokens...

SEPPmail AG Secure Email Gateway input validation error vulnerability

Versions prior to 15.1.1 of SEPPmail AG Secure Email Gateway contain an input validation error vulnerability. This vulnerability arises because unauthenticated users can select input fields in the GINA web interface without proper sanitization; LDAP meta-characters may remain unneutralized,...

Pocket ID input validation error vulnerability

A security vulnerability exists in Pocket ID versions 1.11.0 through 2.10.0. This vulnerability arises because the createTokenFromClientCredentials function accepts a resource parameter controlled by the client and directly incorporates it into the access token audit statement. No validation is...

OmniAuth input validation error vulnerability

Versions prior to OmniAuth 2.2.0 contain an input validation error vulnerability. This vulnerability arises because OmniAuth derives the provider callback URL from the host information controlled by the request. Remote, unauthenticated attackers can supply a forged Host header, leading to a risk ...

hapi.js Joi input validation error vulnerability

Versions of hapi.js Joi prior to 17.13.6 and from 18.2.5 through 18.3.1 contain an input validation error vulnerability. This vulnerability arises because the compile and merge functions in lib/messages.js fail to reject the proto language key. Attackers can exploit this by providing untrusted...

Effect input validation error vulnerability

Versions of Effect prior to 0.1.0 and from 0.97.1 up to 4.0.0-beta.0 and 4.0.0-beta.103 contain an input validation error vulnerability. This vulnerability arises because the name, domain, and path fields in makeCookie allow semicolon separators; serializeCookie writes these values unchanged into...

Huawei HarmonyOS input validation error vulnerability

Huawei HarmonyOS version 7.0.0 contains an input validation error vulnerability. This vulnerability stems from a denial-of-service issue in the file parsing module; successful exploitation may affect system availability...

Chainguard Forks caniko input validation error vulnerability

Versions of Chainguard Forks prior to Kaniko 1.25.20 contain a security vulnerability. This vulnerability arises from using unanchored regular expressions to validate ACR registries, allowing spoofed hosts containing strings such as .azurecr.io to be accepted. As a result, Microsoft Entra ID acce...

WSO2 Open Banking AM input validation error vulnerability

The WSO2 Open Banking AM contains an input validation error vulnerability. This flaw arises because user input is accepted when constructing a redirect URL without performing the intended validation checks. As a result, open redirection may occur; attackers can exploit specially crafted URLs to...

Stirling Tools Stirling PDF input validation error vulnerability

A security vulnerability exists in Stirling Tools Stirling PDF versions from 2.13.1 up to but not including 2.13.2. This vulnerability arises because when the POST /api/v1/convert/svg/pdf endpoint processes SVG files submitted by attackers via Apache Batik, the relative image references generated...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.79 contain an input validation error vulnerability. This vulnerability stems from improper V8 input validation and may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.79 contain an input validation error vulnerability. This flaw stems from improper input validation in Skia and may allow remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...

WIT SynApps Runtime input validation error vulnerability

WIT SynApps Runtime versions 1.4.11 and earlier contain an input validation error vulnerability. This vulnerability stems from a cross-domain request forgery attack facilitated by a browser. Attackers can supply arbitrary target addresses during the controller registration process, causing the...