93164 matches found
PT-2026-110897
Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.5 Description Improper input validation may allow a local attacker to cause a denial of service. Recommendations At the moment, there is no information about a newer...
ROS-20261012-73-0170
The vulnerability of the kernel network module in the Linux operating system is related to incorrect checking of the amount of data at the input. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-110969
Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite - Location Service for Esri versions 9.0 through 9.2 Description Improper input validation occurs due to an unsanitised container image reference within a Kubernetes operator template. Recommendations At the moment...
CVE-2026-84317: Improper Input Validation
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, internal/config/validation.go ValidateConfigFile is a security control that blocks dangerous nginx directives — js, perl, loadmodule of the njs/perl modules, and user root. It is enforced on three of the four config-write...
PT-2026-110968
Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite - Location Service for Esri versions 9.0 through 9.2 Description Improper input validation occurs due to an unsanitised container image configuration within a Kubernetes operator template. Recommendations At the...
Rocky Linux 9.6 [TuxCare] Security Update: ignition / ignition-edge / ignition-grub / ignition-validate (ALMALINUX9.6:CLSA-2026:1791487723)
"The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791487723 advisory. - gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input...
AlmaLinux 9.6 [TuxCare] Security Update: ignition / ignition-edge / ignition-grub / ignition-validate (ALMALINUX9.6:CLSA-2026:1791487723)
"The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791487723 advisory. - gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input...
CVE-2026-18537: Improper Control of Generation of Code
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a Kubernetes operator template...
CVE-2026-21130: Improper Input Validation
Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...
Cisco Meraki Data Compromise
The vulnerability of Cisco Meraki network device software-related microprograms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of protected information...
Content Credentials SDK Insufficient Validation
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...
Content Credentials SDK Insufficient Validation
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...
Content Credentials SDK Insufficient Validation DoS
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...
Improper Input Validation
Bouncy Castle for Java is vulnerable to Improper Input Validation. The vulnerability is due to the MTI/A0 Diffie-Hellman agreement process exponentiating unvalidated peer-supplied values without range or subgroup-membership checks, which allows a malicious peer to recover the local static private...
CVE-2026-66731-Negative-Chunk-Size-Parsing-Causes-Memory-Corruption-leading-to-Server-Crash
Security Advisory: Negative Chunk-Size Parsing Causes Memory Corruption in facil.io Assigned CVE ID : CVE-2026-66731 Product: facil.io Affected versions: facil.io = 0.7.5 0.7.5, 0.7.6, master; introduced when the 0.8.x HTTP/1.1 parser was backported in 0.7.5 - not present in 0.6.x or 0.7.0–0.7.3...
FLIR AX8 1.46.16 - Remote Command Injection
FLIR AX8 version 1.46.16 and below is susceptible to an unauthenticated remote command injection vulnerability.The vulnerability exists in the alarm functionality where user-supplied input in the 'id' parameter is not properly sanitized,allowing attackers to inject and execute arbitrary OS...
CVE-2026-106263
An improper input validation flaw was found in the SignIn component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553149001...
CVE-2026-106226
An improper input validation flaw was found in the Compositing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/520573237...