Cisco IOS XR Input Validation Error Vulnerability (CNVD-2025-15799)

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. A security vulnerability exists in Cisco IOS XR that stems from the incorrect handling of malformed IPv4 packets, which can be exploited by an attacker to cause a line card reset,...

Delta Electronics CNCSoft-G2 Input Validation Error Vulnerability

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. An input validation error vulnerability exists in Delta Electronics CNCSoft-G2 version 2.1.0.16 and prior versions, which can be exploited by an attacker to execute code in the current process...

LLAVA input validation vulnerability

LLaVA is an application by the individual developer Haotian Liu. An input validation error vulnerability exists in LLaVA v1.2.0, which stems from an open redirect and could allow a remote, unauthenticated attacker to redirect users to arbitrary websites...

FastChat has a vulnerability related to input validation.

FastChat is an open platform from LMSYS for training, deploying, and evaluating chatbots based on large language models. An input validation error vulnerability exists in FastChat version v0.2.36, which stems from an open redirection vulnerability that could lead to phishing attacks, malware...

Invoke input validation vulnerability

Invoke is a leading creative engine for stabilizing diffusion models open-sourced by InvokeAI. An input validation error vulnerability exists in Invoke version v5.0.2, which stems from an arbitrary file deletion vulnerability in the POST /api/v1/images/delete API...

Microsoft Partner Center: Input validation error vulnerability

Microsoft Partner Center is an online platform from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Partner Center, which stems from an attacker's ability to elevate privileges by exploiting the vulnerability...

Redis client for Go: Input validation error vulnerability

Redis client for Go is a Redis Go client for the Redis open source. An input validation error vulnerability exists in Redis client for Go, which stems from a CLIENT SETINFO timeout that can cause responses to be out of order, which can affect the response to connection and pipeline commands...

LLAVA input validation vulnerability

LLaVA is an application by Haotian Liu, an individual developer. LLaVA suffers from an input validation error vulnerability that stems from improper input validation of the gradio web UI component, which could lead to a local file inclusion attack...

ZTE GoldenDB Input Validation Error Vulnerability

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An input validation error vulnerability exists in ZTE GoldenDB, which...

Number withdrawal

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. An input validation error vulnerability exists in Delta Electronics CNCSoft-G2 version 2.1.0.16 and prior versions, which can be exploited by an attacker to execute code in the current process...

Tenda TX3 setstaticRoutecfg function buffer overflow vulnerability

Tenda TX3 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda TX3 16.03.13.11multi, which originates when the parameter list of goform /setstaticRoutecfg fails to correctly validate the length of the input data, and can be exploited by an attacker t...

Cisco IOS XR input validation error vulnerability

Cisco IOS XR is a set of operating systems developed by Cisco USA for its network devices. An input validation error vulnerability exists in Cisco IOS XR that stems from incorrect handling of malformed IPv4 multicast packets, which could result in a line card reset, leading to a denial of service...

IBM Control Center Input Validation Error Vulnerability (CNVD-2025-06654)

IBM Control Center is a centralized monitoring and management system from International Business Machines IBM. An input validation error vulnerability exists in IBM Control Center versions 6.2.1 through 6.3.1, which stems from improper user input validation, and can be exploited by an attacker to...

Ashlar-Vellum Cobalt has a vulnerability in input validation.

Ashlar-Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar-Vellum. An input validation error vulnerability exists in Ashlar-Vellum Cobalt that stems from an integer overflow when parsing an XE file, which could lead to remote code execution...

ZTE GoldenDB has a vulnerability related to input validation.

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An input validation error vulnerability exists in ZTE GoldenDB, which...

Libzvbi: Input validation error vulnerability

libzvbi is a VBI utility in the zapping-vbi open source. An input validation error vulnerability exists in libzvbi version 0.2.43 and earlier, which stems from an integer overflow and could lead to a remote attack...

Libzvbi: Input validation error vulnerability

libzvbi is a VBI utility in the zapping-vbi open source. An input validation error vulnerability exists in libzvbi version 0.2.43 and earlier, which stems from an integer overflow and could lead to a remote attack...

Siemens SiPass Integrated input validation vulnerability

Siemens SiPass Integrated is a powerful and extremely flexible access control system from Siemens Germany. An input validation error vulnerability exists in the Siemens SiPass Integrated AC5102 ACC-G2 and ACC-AP V6.4.9 and earlier versions, which stems from not properly clearing user inputs on th...

Siemens SiPass Integrated input validation vulnerability

Siemens SiPass Integrated is a powerful and extremely flexible access control system from Siemens Germany. An Input Validation Error vulnerability exists in Siemens SiPass Integrated AC5102 ACC-G2 and ACC-AP V6.4.9 and earlier versions, which stems from incorrectly cleared inputs on the pubkey...

Libzvbi: Input validation error vulnerability

libzvbi is a VBI utility in the zapping-vbi open source. An input validation error vulnerability exists in libzvbi version 0.2.43 and earlier, which stems from an integer overflow and could lead to a remote attack...