Lucene search
+L

76141 matches found

Veracode
Veracode
added 2026/08/13 11:13 a.m.6 views

Improper Input Validation

Apache Camel is vulnerable to Improper Input Validation. The vulnerability is due to unfiltered CometD client-supplied headers being copied directly into the Camel Exchange, which allows an attacker to inject Camel control headers and manipulate downstream producers such as HTTP, file, or JMS...

9.8CVSS5.3AI score0.00706EPSS
SaveExploits1References6Affected Software1
Elastic
Elastic
added 2026/08/13 10:47 a.m.15 views

Kibana 8.19.20, 9.3.8, and 9.4.5 Security Update (ESA-2026-101)

Uncaught Exception in Kibana Leading to Denial of Service Description: Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged access can cause an...

6.5CVSS5.6AI score0.00359EPSS
SaveExploits0
Veracode
Veracode
added 2026/08/13 9:05 a.m.8 views

Input Validation Vulnerability

Apache Camel Mail Component is vulnerable to Improper Input Validation and Exposure of Sensitive Information to an Unauthorized Actor. The vulnerability is due to the MailProducer accepting attacker-controlled mail.smtp. and mail.smtps. headers, allowing untrusted input to override mail session...

3.7CVSS5.2AI score0.00391EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2026/08/13 7:35 a.m.8 views

Improper Input Validation

Apache Camel is vulnerable to Improper Input Validation. The vulnerability is due to unfiltered operationName and operationNamespace headers from inbound HTTP requests, which allows an attacker to control the SOAP operation invoked by the CXF producer and potentially trigger unintended or...

7.5CVSS5.3AI score0.00396EPSS
SaveExploits1References5Affected Software3
NVD
NVD
added 2026/08/13 3:16 a.m.11 views

CVE-2026-0298

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider PLAP component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle MitM attacker to execute arbitrary code with SYSTEM privileges on an affected client. The...

7.7CVSS0.00188EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/13 2:02 a.m.11 views

EUVD-2026-57712

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider PLAP component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle MitM attacker to execute arbitrary code with SYSTEM privileges on an affected client. The...

7.7CVSS5.8AI score0.00188EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/13 2:02 a.m.41 views

CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider PLAP component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle MitM attacker to execute arbitrary code with SYSTEM privileges on an affected client. The...

7.7CVSS0.00188EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/13 2:02 a.m.6 views

CVE-2026-0298

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider PLAP component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle MitM attacker to execute arbitrary code with SYSTEM privileges on an affected client. The...

7.7CVSS5.8AI score0.00188EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/08/13 2:02 a.m.29 views

CVE-2026-0298

The CVE-2026-0298 issue affects the Windows GlobalProtect app’s Pre-Logon Access Provider (PLAP). The vulnerability arises from improper input validation in PLAP, enabling a man-in-the-middle attacker to execute arbitrary code with SYSTEM privileges on Windows clients. The vulnerability does not ...

7.7CVSS5.8AI score0.00188EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.3 views

PT-2026-71492

HCL AION is affected by a vulnerability where certain input fields do not enforce sufficient server-side input validation. Unexpected or crafted input may be accepted by the application, potentially resulting in unintended behavior or security impact under certain conditions...

3.4CVSS5.3AI score0.00143EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.6 views

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21561-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21561-1 advisory. Changes in chromium: - Chromium 151.0.7922.108 boo1274549: CVE-2026-19137: Use after free in WebGL CVE-2026-19149: Use after free in Aura...

9.6CVSS5.9AI score0.00545EPSS
SaveExploits0References83
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-19517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows...

6.5CVSS5.3AI score0.00199EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-19518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation. CVE-2026-19518 Note that Nessus...

6.5CVSS5.3AI score0.00199EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.3 views

PT-2026-71614

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests cca cipher2protkey derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length...

7.8CVSS5.2AI score0.00129EPSS
SaveExploits0References6
Redos
Redos
added 2026/08/13 12:00 a.m.6 views

ROS-20260813-73-0005

The vulnerability in Gitea is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.1CVSS6.1AI score0.00284EPSS
SaveExploits0
Redos
Redos
added 2026/08/13 12:00 a.m.6 views

ROS-20260813-73-0002

The vulnerability in Portainer-Ce is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

9.4CVSS8.3AI score0.00176EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.4 views

PT-2026-71896

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Pathological inputs can cause an unescaped '/' to close prematurely. This allows attack-controlled data to inject arbitrary content, which may lead to Cross-Site...

6.1CVSS5.5AI score0.00263EPSS
SaveExploits0References18
NVD
NVD
added 2026/08/12 9:17 p.m.8 views

CVE-2026-13476

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...

7.3CVSS0.00549EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/12 8:58 p.m.34 views

CVE-2026-13476 IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...

7.3CVSS0.00549EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/12 8:58 p.m.8 views

EUVD-2026-57627

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...

7.3CVSS5.7AI score0.00549EPSS
SaveExploits0References1
Rows per page
Query Builder