DigitalBazaar Forge input validation error vulnerability

Versions of DigitalBazaar Forge prior to 1.4.1 contain a security vulnerability. This vulnerability arises when accepting PKCS12 MACs or PKCS12 encrypted with a password that have zero or fewer encryption iterations; as a result, a fixed key unrelated to both the password and salt is generated...

DNSmasq input validation error vulnerability

dnsmasq has an input validation error vulnerability. This vulnerability arises because the parser fails to verify whether CNAME target records in DNS responses belong to the authorized zone of the responding server when processing CNAME records. As a result, attackers can inject cache entries wit...

HCL BigFix AEX input validation error vulnerability

HCL BigFix AEX version 13.0 contains an input validation error vulnerability. This vulnerability stems from a flaw in the aws-sdk package and may result in AWS API requests being sent to unintended or non-AWS endpoints...

Grafana Enterprise input validation error vulnerability

Security vulnerabilities exist in Grafana Enterprise versions from 10.0.0 through 11.6.16, 12.0.0 through 12.2.10, 12.3.0 through 12.3.11, 12.4.0 through 12.4.13, 13.0.0 through 13.0.11, 13.1.0 through 13.1.8, and 13.2.0 through 13.2.4. Similarly, security vulnerabilities are present in Grafana O...

Apache Kafka input validation error vulnerability

Security vulnerabilities exist in Apache Kafka versions 0.10.0.0 through 4.1.2, 4.2.0 through 4.2.1, and 4.3.0 through 4.3.1. These vulnerabilities arise because multiple deserialization paths directly use size or count fields in input to allocate arrays, collections, or byte buffers; no validati...

Grafana OSS input validation error vulnerability

Security vulnerabilities exist in Grafana OSS versions from 7.4.0 up to 11.6.16, 12.0.0 up to 12.2.10, 12.3.0 up to 12.3.11, 12.4.0 up to 12.4.13, 13.0.0 up to 13.0.11, 13.1.0 up to 13.1.8, and 13.2.0 up to 13.2.4. These vulnerabilities arise because users with the Viewer role can submit speciall...

Highcharts input validation error vulnerability

In Highcharts versions 1.0.0 through 4.2.2, there is an input validation error vulnerability. This vulnerability arises because the DataCursor listener and state mapping store data in plain objects using DataTable IDs as keys. The proto table ID configured via the dataPool connector is resolved t...

Tactis NoviGest Desktop App input validation error vulnerability

The Tactis NoviGest Desktop App versions prior to 8.0.0-300 contain an input validation error vulnerability. This vulnerability arises because the SAFT import functionality fails to properly disable external entity resolution when processing XML files controlled by users via JAXB Unmarshaller. As...

MeWebStudio Turkish banks virtual POS package input validation error vulnerability

MeWebStudio has a vulnerability related to input validation in version 2.0.0 and earlier of its virtual POS package for Turkish banks. This vulnerability stems from insufficient data authenticity checks. The 3D Pay and 3D Host processors in GarantiPos, PayForPos, and InterPos bypass the check3DHa...

Progress Software Telerik Document Processing Libraries input validation error vulnerability

Versions of Progress Software Telerik Document Processing Libraries prior to 2026.3.1027 contain an input validation error vulnerability. This vulnerability stems from XML external entity references in SVG image processing, potentially allowing unauthenticated attackers to read local server files...

OpenBSD LibreSSL input validation error vulnerability

OpenBSD LibreSSL versions 4.4.0 and earlier contain an input validation error vulnerability. This vulnerability arises because url2host fails to reject control characters when copying paths, and httpopen incorporates them into POST request lines. Attackers can embed CR/LF sequences within the AIA...

Samba input validation error vulnerability

A vulnerability related to input validation exists in Samba versions 4.25.0 through 4.25.1. This vulnerability stems from an access control bypass in the openat function within the vfscephrgw module. Authenticated users can exploit this by requesting files whose names do not match case, causing t...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain an input validation error vulnerability. This vulnerability stems from improper V8 input validation and may allow remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...

Google Chrome input validation error vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain an input validation error vulnerability. This vulnerability stems from improper input validation in the Command component, allowing remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...

Google Chrome input validation error vulnerability

Google Chrome on Android versions prior to 156.0.8078.73 contain an input validation error vulnerability. This vulnerability stems from improper UI input validation and may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome input validation error vulnerability

Google Chrome on Android versions prior to 156.0.8078.73 contains an input validation error vulnerability. This vulnerability stems from improper input validation within Core and may allow remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain an input validation error vulnerability. This flaw stems from improper input validation in ReadingList, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain an input validation error vulnerability. This vulnerability stems from improper input validation in ANGLE and may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain an input validation error vulnerability. This vulnerability stems from improper input validation in the FileAPI, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Tanium Comply input validation error vulnerability

Versions prior to Tanium Comply 2.32.263, versions prior to 2.35.323, and versions prior to 2.37.326 contain an input validation error vulnerability stemming from improper output sanitization, which may lead to CSV injection...