Lucene search
+L

76149 matches found

Veracode
Veracode
added 2026/08/13 3:08 p.m.8 views

Improper Input Validation

Apache ActiveMQ is vulnerable to an Improper Input Validation vulnerability. The vulnerability is due to improper validation of negative content-length values in STOMP requests, which allows a remote unauthenticated attacker with access to an exposed STOMP connector to send malicious body data an...

7.5CVSS5.3AI score0.00577EPSS
SaveExploits0References4Affected Software3
RedHat Linux
RedHat Linux
added 2026/08/13 2:50 p.m.10 views

org.apache.camel/camel-mail: Apache Camel Mail Component: Credential exposure and information disclosure via improper input validation of mail headers

A flaw was found in the Apache Camel Mail Component. This vulnerability, due to improper input validation, allows a remote attacker to exploit routes that channel untrusted input into the mail producer without proper header stripping. Before version 4.19.0, this could lead to the redirection of...

3.7CVSS5.3AI score0.00391EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/08/13 2:50 p.m.9 views

org.apache.camel/camel-cxf: Apache Camel CXF SOAP: Remote attacker can execute unintended operations via header manipulation

A flaw was found in the Apache Camel CXF SOAP component. A remote attacker can exploit this vulnerability by manipulating the operationName header in an unauthenticated HTTP request. This improper input validation allows the attacker to force the CxfProducer to invoke unintended SOAP operations o...

7.5CVSS5.5AI score0.00396EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2026/08/13 2:46 p.m.17 views

CVE-2026-70452

rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution failures during hostname-based access control evaluation. When a DNS lookup for a hostname-based deny rule fails, the daemon skips the ru...

9.1CVSS5.4AI score0.00462EPSS
SaveExploits0
NVD
NVD
added 2026/08/13 2:16 p.m.4 views

CVE-2025-62315

HCL AION is affected by a vulnerability where certain input fields do not enforce sufficient server-side input validation. Unexpected or crafted input may be accepted by the application, potentially resulting in unintended behavior or security impact under certain conditions...

3.4CVSS0.00143EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/13 1:23 p.m.6 views

EUVD-2025-210725

HCL AION is affected by a vulnerability where certain input fields do not enforce sufficient server-side input validation. Unexpected or crafted input may be accepted by the application, potentially resulting in unintended behavior or security impact under certain conditions...

3.4CVSS5.3AI score0.00143EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/13 1:23 p.m.30 views

CVE-2025-62315 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by a vulnerability where certain input fields do not enforce sufficient server-side input validation. Unexpected or crafted input may be accepted by the application, potentially resulting in unintended behavior or security impact under certain conditions...

3.4CVSS0.00143EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/13 1:23 p.m.21 views

CVE-2025-62315

Technical details of CVE-2025-62315 are not publicly available in the provided documents; monitor for updates.

3.4CVSS5.3AI score0.00143EPSS
SaveExploits0References1
Veracode
Veracode
added 2026/08/13 11:13 a.m.7 views

Improper Input Validation

Apache Camel is vulnerable to Improper Input Validation. The vulnerability is due to unfiltered CometD client-supplied headers being copied directly into the Camel Exchange, which allows an attacker to inject Camel control headers and manipulate downstream producers such as HTTP, file, or JMS...

9.8CVSS5.3AI score0.00706EPSS
SaveExploits1References6Affected Software1
Elastic
Elastic
added 2026/08/13 10:47 a.m.16 views

Kibana 8.19.20, 9.3.8, and 9.4.5 Security Update (ESA-2026-101)

Uncaught Exception in Kibana Leading to Denial of Service Description: Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged access can cause an...

6.5CVSS5.6AI score0.00359EPSS
SaveExploits0
Veracode
Veracode
added 2026/08/13 9:05 a.m.8 views

Input Validation Vulnerability

Apache Camel Mail Component is vulnerable to Improper Input Validation and Exposure of Sensitive Information to an Unauthorized Actor. The vulnerability is due to the MailProducer accepting attacker-controlled mail.smtp. and mail.smtps. headers, allowing untrusted input to override mail session...

3.7CVSS5.2AI score0.00391EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2026/08/13 7:35 a.m.9 views

Improper Input Validation

Apache Camel is vulnerable to Improper Input Validation. The vulnerability is due to unfiltered operationName and operationNamespace headers from inbound HTTP requests, which allows an attacker to control the SOAP operation invoked by the CXF producer and potentially trigger unintended or...

7.5CVSS5.3AI score0.00396EPSS
SaveExploits1References5Affected Software3
NVD
NVD
added 2026/08/13 3:16 a.m.11 views

CVE-2026-0298

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider PLAP component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle MitM attacker to execute arbitrary code with SYSTEM privileges on an affected client. The...

7.7CVSS0.00188EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/13 2:02 a.m.11 views

EUVD-2026-57712

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider PLAP component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle MitM attacker to execute arbitrary code with SYSTEM privileges on an affected client. The...

7.7CVSS5.8AI score0.00188EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/13 2:02 a.m.41 views

CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider PLAP component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle MitM attacker to execute arbitrary code with SYSTEM privileges on an affected client. The...

7.7CVSS0.00188EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/13 2:02 a.m.6 views

CVE-2026-0298

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider PLAP component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle MitM attacker to execute arbitrary code with SYSTEM privileges on an affected client. The...

7.7CVSS5.8AI score0.00188EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/08/13 2:02 a.m.29 views

CVE-2026-0298

The CVE-2026-0298 issue affects the Windows GlobalProtect app’s Pre-Logon Access Provider (PLAP). The vulnerability arises from improper input validation in PLAP, enabling a man-in-the-middle attacker to execute arbitrary code with SYSTEM privileges on Windows clients. The vulnerability does not ...

7.7CVSS5.8AI score0.00188EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.3 views

PT-2026-71492

HCL AION is affected by a vulnerability where certain input fields do not enforce sufficient server-side input validation. Unexpected or crafted input may be accepted by the application, potentially resulting in unintended behavior or security impact under certain conditions...

3.4CVSS5.3AI score0.00143EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-19517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows...

6.5CVSS5.3AI score0.00199EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-19518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation. CVE-2026-19518 Note that Nessus...

6.5CVSS5.3AI score0.00199EPSS
SaveExploits0References3
Rows per page
Query Builder