Lucene search
+L

76964 matches found

Positive Technologies
Positive Technologies
added 2026/07/06 12:00 a.m.27 views

PT-2026-55898

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Vertx Websocket component. The camel-vertx-websocket consumer mapped inbound WebSocket query and path parameters into the Camel Exchange header...

6AI score0.00857EPSS
SaveExploits1References2
NVD
NVD
added 2026/07/05 1:16 p.m.30 views

CVE-2026-59509

An unauthenticated improper input validation vulnerability in the POST /fetchcvedata endpoint in cve-search. A remote attacker can manipulate request parameters controlling the MongoDB collection, projected fields, and regular-expression filters to read arbitrary application MongoDB collections...

9.2CVSS0.00542EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/05 12:02 p.m.8 views

CVE-2026-59509

An unauthenticated improper input validation vulnerability in the POST /fetchcvedata endpoint in cve-search. A remote attacker can manipulate request parameters controlling the MongoDB collection, projected fields, and regular-expression filters to read arbitrary application MongoDB collections...

9.2CVSS6.2AI score0.00542EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/07/05 12:02 p.m.28 views

EUVD-2026-41753

An unauthenticated improper input validation vulnerability in the POST /fetchcvedata endpoint in cve-search. A remote attacker can manipulate request parameters controlling the MongoDB collection, projected fields, and regular-expression filters to read arbitrary application MongoDB collections...

9.2CVSS6.2AI score0.00542EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/05 12:00 a.m.35 views

PT-2026-55794

Name of the Vulnerable Software and Affected Versions cve-search affected versions not specified Description An unauthenticated improper input validation issue exists in the 'POST /fetch cve data' endpoint. A remote attacker can manipulate request parameters that control the MongoDB collection,...

9.2CVSS6.1AI score0.00542EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/07/04 1:16 a.m.147 views

Exploit for Improper Input Validation in Microsoft

No d...

9.8CVSS5.9AI score0.9466EPSS
SaveExploits24
Snyk
Snyk
added 2026/07/03 10:19 p.m.10 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via insufficient validation of repository creation fields, including length-limited template fields and trust model or object format values. An attacker can submit malformed or unexpected data by providing...

9.1CVSS6AI score0.00522EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/03 10:19 p.m.11 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via insufficient validation of repository creation fields, including length-limited template fields and trust model or object format values. An attacker can submit malformed or unexpected data by providing...

9.1CVSS6AI score0.00522EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/03 10:19 p.m.10 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via insufficient validation of repository creation fields, including length-limited template fields and trust model or object format values. An attacker can submit malformed or unexpected data by providing...

9.1CVSS6AI score0.00522EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/03 9:17 p.m.21 views

CVE-2026-58292

Improper input validation in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

7.5CVSS0.00483EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/03 9:17 p.m.12 views

CVE-2026-57985

Improper input validation in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

8.8CVSS0.0072EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/03 8:35 p.m.15 views

CVE-2026-58292

Improper input validation in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

7.5CVSS6.1AI score0.00483EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/07/03 8:35 p.m.16 views

EUVD-2026-41650

Improper input validation in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

7.6CVSS6.1AI score0.0072EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/03 8:35 p.m.10 views

CVE-2026-57985

Improper input validation in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

7.6CVSS6.1AI score0.0072EPSS
SaveExploits0References2Affected Software1
Snyk
Snyk
added 2026/07/03 7:13 p.m.11 views

Improper Input Validation

Overview org.webjars.npm:webpack-dev-server is an Uses webpack with a development server that provides live reloading. It should be used for development only. Affected versions of this package are vulnerable to Improper Input Validation through the host-validation process. An attacker can cause t...

6.9CVSS6AI score0.00517EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/03 7:13 p.m.11 views

Improper Input Validation

Overview webpack-dev-server is an Uses webpack with a development server that provides live reloading. It should be used for development only. Affected versions of this package are vulnerable to Improper Input Validation through the host-validation process. An attacker can cause the server to...

6.9CVSS6AI score0.00517EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2026/07/03 2:00 p.m.150 views

Chromium: CVE-2026-14131 Insufficient validation of untrusted input in WebAppInstalls

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

5.4CVSS5.9AI score0.00218EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/07/03 2:00 p.m.22 views

Chromium: CVE-2026-13797 Insufficient validation of untrusted input in Chromecast

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

9.6CVSS5.9AI score0.00319EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/07/03 2:00 p.m.154 views

Chromium: CVE-2026-13865 Insufficient validation of untrusted input in Enterprise

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS5.9AI score0.00245EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/07/03 2:00 p.m.25 views

Chromium: CVE-2026-14065 Insufficient validation of untrusted input in PageInfo

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS5.9AI score0.00348EPSS
SaveExploits0
Rows per page
Query Builder