Lucene search
+L

93324 matches found

Cvelist
Cvelist
•added 2026/10/06 1:52 p.m.•40 views

CVE-2026-34498 L4L

Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394...

5CVSS0.00687EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 12:16 p.m.•15 views

CVE-2026-56596

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

3.5CVSS0.00209EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 11:57 a.m.•16 views

EUVD-2026-93373

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

3.5CVSS5.8AI score0.00209EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 11:57 a.m.•25 views

CVE-2026-56596

The HCL BigFix Service Management software is affected by an Improper Input Validation vulnerability (CWE-20). This flaw could allow an attacker to provide malformed or unexpected data, potentially leading to processing errors , business logic bypasses , and unintended application behavior . The ...

3.5CVSS5.8AI score0.00209EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 11:57 a.m.•41 views

CVE-2026-56596 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

3.5CVSS0.00209EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/06 11:57 a.m.•12 views

CVE-2026-56596 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

3.5CVSS5.8AI score0.00209EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 12:16 a.m.•12 views

CVE-2026-105782

Scrapy is a high-level web crawling and scraping framework for Python. From 1.4.0 until 2.14.2, RefererMiddleware in scrapy/spidermiddlewares/referer.py treated a Referrer-Policy response-header value that resembled a Python import path as a referrer policy class, imported the referenced object,...

7.5CVSS0.00378EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•11 views

CVE-2026-106114: Memory Allocation with Excessive Size Value

ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dimensions before confirming that the profile contains the declared values. IccDataReader.ReadClutF32 can request a large float array, and...

5.3CVSS5.9AI score0.00366EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•14 views

PT-2026-107333

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description Improper input validation leads to the improper neutralization of special elements used in an OS command, allowing a remote authenticated attacker to perform code injection and execute...

8.8CVSS6.4AI score0.00449EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•20 views

PT-2026-106713

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

3.5CVSS5.8AI score0.00209EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•12 views

PT-2026-106881

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

9.6CVSS6AI score0.00495EPSS
SaveExploits1References251
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•13 views

PT-2026-106972

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in WebAudio allows a remote attacker who has compromised the renderer process to bypass system access restrictions through a crafted HTML page. Recommendations...

9.6CVSS5.8AI score0.00495EPSS
SaveExploits1References252
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•6 views

CVE-2026-106353: Improper Input Validation

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. Chromium security severity: Low...

6.5CVSS5.8AI score0.00227EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•10 views

CVE-2026-106331: Improper Input Validation

Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted Chrome extension. Chromium security severity: Low...

6.5CVSS5.8AI score0.00227EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•6 views

CVE-2026-106226: Improper Input Validation

Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

4.2CVSS6AI score0.00225EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•6 views

CVE-2026-106263: Improper Input Validation

Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

6.5CVSS5.9AI score0.00208EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•13 views

Cisco ASA Stack-based Buffer Overflow (CVE-2021-34704)

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper input validation when...

8.6CVSS7.5AI score0.01318EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•16 views

Cisco ASA Stack-based Buffer Overflow (CVE-2021-1573)

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper input validation when...

8.6CVSS7.5AI score0.01318EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•6 views

CVE-2026-106185: Improper Input Validation

Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6AI score0.00272EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•18 views

PT-2026-106831

Name of the Vulnerable Software and Affected Versions ImageSharp versions 1.0.0-beta0001 through 4.1.1 Description ICC CLUT parsing calculates allocation sizes based on attacker-declared channel and grid dimensions before verifying that the profile contains the declared values. The...

5.3CVSS5.8AI score0.00366EPSS
SaveExploits0References9
Rows per page
Query Builder