Chainguard Forks caniko input validation error vulnerability

Versions of Chainguard Forks prior to Kaniko 1.25.20 contain a security vulnerability. This vulnerability arises from using unanchored regular expressions to validate ACR registries, allowing spoofed hosts containing strings such as .azurecr.io to be accepted. As a result, Microsoft Entra ID acce...

Huawei HarmonyOS input validation error vulnerability

Huawei HarmonyOS version 7.0.0 contains an input validation error vulnerability. This vulnerability stems from a denial-of-service issue in the file parsing module; successful exploitation may affect system availability...

WSO2 Open Banking AM input validation error vulnerability

The WSO2 Open Banking AM contains an input validation error vulnerability. This flaw arises because user input is accepted when constructing a redirect URL without performing the intended validation checks. As a result, open redirection may occur; attackers can exploit specially crafted URLs to...

Stirling Tools Stirling PDF input validation error vulnerability

A security vulnerability exists in Stirling Tools Stirling PDF versions from 2.13.1 up to but not including 2.13.2. This vulnerability arises because when the POST /api/v1/convert/svg/pdf endpoint processes SVG files submitted by attackers via Apache Batik, the relative image references generated...

WIT SynApps Runtime input validation error vulnerability

WIT SynApps Runtime versions 1.4.11 and earlier contain an input validation error vulnerability. This vulnerability stems from a cross-domain request forgery attack facilitated by a browser. Attackers can supply arbitrary target addresses during the controller registration process, causing the...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.79 contain an input validation error vulnerability. This vulnerability stems from improper V8 input validation and may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.79 contain an input validation error vulnerability. This flaw stems from improper input validation in Skia and may allow remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...

DigitalBazaar Forge input validation error vulnerability

Versions of DigitalBazaar Forge prior to 1.4.1 contain a security vulnerability. This vulnerability arises when accepting PKCS12 MACs or PKCS12 encrypted with a password that have zero or fewer encryption iterations; as a result, a fixed key unrelated to both the password and salt is generated...

Python CPython input validation error vulnerability

Python versions prior to CPython 3.16.0 contain an input validation error vulnerability. This vulnerability arises because socket.getaddrinfo accepts empty bytes in the host and port parameters, potentially leading to silent truncation of those parameters...

Safir input validation error vulnerability in the National Accounting Office

The input validation error vulnerability exists in Szafir 2.0.0 and earlier versions, as well as Szafir Weryfikująca 1.0 and earlier versions. This vulnerability stems from the parser’s handling of external entities when processing specially crafted XML files containing external DTD references to...

Microsoft Edge (Chromium-based) input validation error vulnerability

Microsoft Edge Chromium-based versions prior to 156.0.4314.50 contain an input validation error vulnerability. This vulnerability arises from the inability to permit incomplete lists of inputs, potentially allowing unauthorized attackers to bypass security mechanisms via the network...

DigitalBazaar Forge input validation error vulnerability

Versions of DigitalBazaar Forge prior to 1.4.1 contain a security vulnerability. This vulnerability arises because, under CBC and ECB encryption modes, only the last byte of PKCS7 padding is verified; zero, excessively large, or mismatched padding bytes are accepted. As a result, malformed...

OpenEQUELLA input validation error vulnerability

Versions of openEQUELLA prior to 2026.1 contain an input validation error vulnerability. This flaw arises because the XML parser used for project metadata fails to disable external entity resolution. Users with project creation privileges can submit specially crafted XML via POST /api/item,...

Jack Lloyd Botan input validation error vulnerability

Versions of Jack Lloyd Botan from 1.11.22 up to but not including 3.13.0 contain an input validation error vulnerability. This vulnerability arises because Python’s binding fails to consistently reject embedded NUL characters when converting a Python string containing U+0000 into a const char. As...

RT-Labs p-net input validation error vulnerability

Versions prior to RT-Labs p-net 1.0.3 contain an input validation error vulnerability. This vulnerability arises from a failure to verify whether the length field of the variable part of an RTA alert message matches the length of the received frame. A short frame can cause the callback to receive...

OpenEQUELLA input validation error vulnerability

Versions of openEQUELLA prior to 2026.1 contain an input validation error vulnerability. This vulnerability arises because the SOAP API uses an XML parser capable of parsing external entities during the stopEdit operation; it may allow attackers to read any file accessible to the service or cause...

Ubiquiti WiFiman Desktop for macOS input validation error vulnerability

Ubiquiti WiFiman Desktop for macOS versions prior to 1.3.0 contain an input validation error vulnerability stemming from improper control over external filenames or paths. Attackers with local access and low privileges can exploit this vulnerability to execute arbitrary commands on the host devic...

SAMSUNG Bixby input validation error vulnerability

Versions of SAMSUNG Bixby prior to 4.0.85.6 contain an input validation error vulnerability. This vulnerability stems from improper input validation and may allow locally privileged attackers to initiate arbitrary activities...

DNSmasq input validation error vulnerability

dnsmasq has an input validation error vulnerability. This vulnerability arises because the parser fails to verify whether CNAME target records in DNS responses belong to the authorized zone of the responding server when processing CNAME records. As a result, attackers can inject cache entries wit...

Bytecode Alliance wasmtime input validation error vulnerability

The Bytecode Alliance Wasmtime versions prior to 46.0.0 through 48.0.6 and 49.0.0 through 49.0.3 contain an input validation error vulnerability. This vulnerability stems from improper handling of out-of-bounds zero-length streams; malicious guests can exploit this to read or write to zero-length...