94397 matches found
CVE-2026-110870 Nodemailer before 10.0.13 Improper Input Validation via Angle-Bracket Address Comments
Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its address parser that fails to strip RFC 5322 comments inside angle-bracket addresses. Attackers can supply recipients like a display name with a parenthesized comment in the domain, so illegal character...
CVE-2026-110870
Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its address parser that fails to strip RFC 5322 comments inside angle-bracket addresses. Attackers can supply recipients like a display name with a parenthesized comment in the domain, so illegal character...
CVE-2026-101992
An Improper Input Validation vulnerability in the routing protocol daemon rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP peer to cause an rpd crash via a BGP VPLS signaling update...
EUVD-2026-101479
An Improper Input Validation vulnerability in the routing protocol daemon rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP peer to cause an rpd crash via a BGP VPLS signaling update...
EnergizeLab station-middleware: Input validation error vulnerability
The EnergizeLab station-middleware versions 1.6.5 to 1.8.2 have a vulnerability related to input validation errors. This vulnerability stems from external control over file paths, allowing any registered low-privilege account to access any file on the server by using a file path controlled by the...
OpenNext for Cloudflare: Input validation error vulnerability
OpenNext for Cloudflare versions 0.3.0 to 1.20.2 have a security vulnerability. This vulnerability arises when enabling enableCacheInterception and relying on middleware for access control. The handling of encoded path names is inconsistent between middleware matching and cache lookup...
WordPress Link Whisper – Free Cross-Site Script Vulnerabilities
WordPress Link Whisper Free 0.9.7 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper input validation during web page generation, making them susceptible to reflection-type cross-site scripting attacks...
HPE NonStop SOAP input validation error vulnerability
HPE NonStop SOAP 4.0 T0865L01^ACN and earlier versions contain an input validation error vulnerability caused by memory corruption, which may lead to system crashes...
HPE Nonstop KMS Server input validation error vulnerability
The HPE Nonstop KMS Server T1190L40 version contains an input validation error vulnerability caused by a buffer overflow when processing specially crafted input messages...
Samsung Open Source Vyond: Input validation error vulnerability
Samsung Open Source Vyond has a vulnerability related to input validation. This vulnerability stems from improper array index validation, which may lead to tampering with input data...
SimplePie input validation vulnerability
SimplePie versions 1.9.0 and earlier have a vulnerability related to input validation errors. This vulnerability arises from improper handling of file:// URLs in redirection or auto-discovery links, allowing filegetcontents to read files accessible to the web server process, potentially leading t...
Google Chrome: Input validation error vulnerability
Versions of Google Chrome prior to 155.0.8059.84 contain a vulnerability related to input validation. This vulnerability arises from improper input validation, and it could allow remote attackers to execute arbitrary code outside of the sandbox through a specially crafted HTML page...
Mat Trudel Bandit has a vulnerability in input validation.
In versions prior to 1.13.0 of Mat Trudel Bandit, version 0.6.0, there was an input validation vulnerability. This vulnerability stemmed from the lack of validation for the authority in HTTP/1 requests. As a result, unauthenticated remote attackers could set conn.host and conn.port to values that...
Eclipse Jetty input validation error vulnerability
Security vulnerabilities exist in Eclipse Jetty versions 12.1.11 and earlier within the 12.1.x series, as well as versions 12.0.38 and earlier within the 12.0.x series. Additionally, vulnerabilities are present in Eclipse Jetty jetty-proxy versions 11.0.32 and earlier within the 11.0.x series,...
WordPress Email Customizer for WooCommerce has a vulnerability related to input validation errors.
The WordPress Email Customizer for WooCommerce version 3.9.5 and earlier has a vulnerability in input validation. This vulnerability stems from insufficient authorization and input cleansing in the sendtestmail function. It allows user-controlled PHP code to be written into executable files in th...
Microsoft Office Word input validation error vulnerability
Microsoft Office Word has a vulnerability related to input validation. This vulnerability stems from relying on untrusted inputs in security decisions, which may allow unauthorized attackers to bypass security features locally...
HPE NonStop SQL/MX SQLCAT input validation error vulnerability
HPE NonStop SQL/MX SQLCAT T1055L40 and earlier versions contain an input validation error vulnerability. This vulnerability stems from improper input validation and may allow unauthenticated users to execute unauthorized commands...
WordPress Booking and Rental Manager has a vulnerability in input validation.
WordPress Booking and Rental Manager 2.8.0 and earlier versions have a vulnerability related to input validation errors. This vulnerability stems from improper validation of the specified number in the input, which may lead to the removal of important client functions...
HPE NonStop SQL/MX Runtime Statistics Input Validation Error Vulnerability
HPE NonStop SQL/MX Run-Time Statistics T1117L40 and earlier versions contain an input validation error vulnerability. This vulnerability stems from memory corruption and null pointer dereferencing, potentially leading to process crashes, denial of service, or information leakage...
