1322 matches found
CVE-2025-30294
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security protections and gain unauthorized read access...
CVE-2025-30293
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security protections and gain unauthorized write access...
PT-2025-16137 · Mediawiki · Mediawiki
Name of the Vulnerable Software and Affected Versions: Mediawiki - HTML Tags versions 1.39 through 1.43 Description: The issue is related to improper input validation, allowing Cross-Site Scripting XSS in Mediawiki - HTML Tags. This is due to a lack of proper validation of user input, which can...
PT-2025-16135 · Unknown +1 · Wikidata Extension +1
Name of the Vulnerable Software and Affected Versions: Mediawiki - Wikidata Extension versions 1.39 through 1.43 Description: The issue is related to improper input validation in the Mediawiki - Wikidata Extension, allowing Cross-Site Scripting XSS from the widthheight message via the...
CVE-2025-27737
Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-24058
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2025-31475
tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js prior to 1.20.1, where the addOrUpdate function, used for applying custom texts, did not properly validate input. This allowed an attacker with direct access to the site's source code ...
PT-2025-15986 · Ibm · Ibm Maximo Application Suite
Name of the Vulnerable Software and Affected Versions: IBM Maximo Application Suite versions 8.11 through 9.0 Description: The issue is related to improper input validation, allowing an authenticated user to perform unauthorized actions. Recommendations: For versions 8.11 through 9.0, update to a...
PT-2025-15917 · WordPress · Wp-Geshi-Highlight
Name of the Vulnerable Software and Affected Versions: WP-GeSHi-Highlight versions 1.4.3 and earlier Description: The WP-GeSHi-Highlight WordPress plugin processes user-supplied input as a regular expression via the wp geshi filter replace code function, which could lead to a Regular Expression...
CVE-2024-47261
51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an attacker to upload files to block access to create image overlays in the web interface of the Axis device...
CVE-2024-47261
51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an attacker to upload files to block access to create image overlays in the web interface of the Axis device...
PT-2025-15236
Name of the Vulnerable Software and Affected Versions tarteaucitron.js versions prior to 1.20.1 Description A vulnerability was identified in the addOrUpdate function of tarteaucitron.js, which did not properly validate input. This allowed an attacker with direct access to the site's source code ...
Mitel MiCollab <= 9.8 SP2 (9.8.2.12) Multiple Vulnerabilities (MISA-2024-0029)
According to its self-reported version, the instance of Mitel MiCollab running on the remote web server is prior to 9.8 SP2 9.8.2.12 and is, therefore, affected by multiple vulnerabilities: - A vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab through 9.8 SP1 FP2...
BIT-JOOMLA-2023-23754 [20230501] - Core - Open Redirect and XSS within the mfa select
An issue was discovered in Joomla! 4.2.0 through 4.3.1. Lack of input validation caused an open redirect and XSS issue within the new mfa selection screen...
BIT-JOOMLA-2020-24598
An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of comcontent leads to an open redirect...
BIT-JOOMLA-2020-13762
In Joomla! before 3.9.19, incorrect input validation of the module tag option in commodules allows XSS...
BIT-JOOMLA-2020-13761
In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" modules allows XSS...
BIT-DOLIBARR-2023-4197 Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE
Improper input validation in Dolibarr ERP CRM = v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code...
