Lucene search
+L

93156 matches found

CVE
CVE
•added 2026/10/13 8:21 p.m.•15 views

CVE-2026-106613

Adobe ColdFusion is affected by an Improper Input Validation vulnerability (CWE-20). This flaw allows a low-privileged attacker to execute arbitrary code within the context of the current user. Exploitation does not require any user interaction. Specific technical details regarding the vulnerable...

8.8CVSS7.1AI score0.00857EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/10/13 8:21 p.m.•18 views

CVE-2026-106613 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

8.8CVSS0.00857EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/13 8:21 p.m.•16 views

CVE-2026-75995 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an...

8.4CVSS0.0033EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 8:21 p.m.•11 views

CVE-2026-75995

ColdFusion is impacted by an Improper Input Validation vulnerability (CWE-20). An attacker with high privileges can exploit this flaw to achieve arbitrary code execution within the context of the current user. While the vulnerable component is restricted to an administrative network zone by defau...

8.4CVSS7.1AI score0.0033EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/10/13 8:21 p.m.•17 views

CVE-2026-105900 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction...

7.5CVSS0.00508EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 8:21 p.m.•16 views

CVE-2026-105900

The ColdFusion application is affected by an Improper Input Validation vulnerability (CWE-20). An attacker can exploit this flaw to crash the application, resulting in a denial-of-service (DoS) condition. Exploitation of this vulnerability does not require any user interaction. No specific detail...

7.5CVSS5.8AI score0.00508EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/10/13 8:17 p.m.•4 views

CVE-2026-106626

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not...

9.1CVSS0.00661EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 8:17 p.m.•5 views

CVE-2026-105895

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require use...

9.9CVSS0.00634EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 8:07 p.m.•31 views

CVE-2026-78628

The Okta Credential Provider for Windows contains an improper input validation vulnerability. The software fails to validate the buffer size and packed string offsets of a serialized credential buffer before interpreting it as a Kerberos logon structure . Processing a malformed buffer can cause t...

6CVSS6.1AI score0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/13 8:07 p.m.•17 views

CVE-2026-78628 Improper Input Validation in the Okta Credential Provider for Windows

The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate...

6CVSS0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/13 7:38 p.m.•17 views

CVE-2026-106626 Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not...

9.1CVSS0.00661EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:38 p.m.•18 views

CVE-2026-106626

Adobe Experience Manager is affected by an Improper Input Validation vulnerability (CWE-20) that could allow an attacker with high privileges to achieve arbitrary code execution in the context of the current user. This vulnerability does not require user interaction and has a CRITICAL severity ra...

9.1CVSS7.1AI score0.00661EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:38 p.m.•21 views

CVE-2026-105895

Adobe Experience Manager is affected by an Improper Input Validation vulnerability (CWE-20). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user, potentially leading to elevated privileges or control over the victim's account or session. Ex...

9.9CVSS6.3AI score0.00634EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/13 7:38 p.m.•17 views

CVE-2026-105895 Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require use...

9.9CVSS0.00634EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:21 p.m.•8 views

CVE-2026-95630

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user...

4.3CVSS0.00472EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:21 p.m.•4 views

CVE-2026-95631

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

8.7CVSS0.00856EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:21 p.m.•4 views

CVE-2026-92464

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

9.1CVSS0.00752EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:17 p.m.•6 views

CVE-2026-105719

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

6.5CVSS0.00961EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:01 p.m.•36 views

CVE-2026-97801

A vulnerability in the .NET Framework arises from the improper validation of specified type of input . This flaw allows an unauthorized attacker to perform tampering over a network . The vulnerability has a high base severity score of 7.5 (CVSS 3.1), with an impact primarily affecting integrity ....

7.5CVSS5.8AI score0.00609EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/13 7:01 p.m.•8 views

EUVD-2026-100204

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00815EPSS
SaveExploits0References1
Rows per page
Query Builder