Lucene search
+L

77620 matches found

Vulnrichment
Vulnrichment
added 2026/04/29 1:43 p.m.6 views

CVE-2026-41220

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP Windows before build 9.0.93212, Acronis Cyber Protect Cloud Agent Windows before build 42183...

7.8CVSS7.5AI score0.00107EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/29 1:43 p.m.35 views

CVE-2026-41220

CVE-2026-41220 describes a local privilege escalation caused by improper input validation affecting Acronis DeviceLock DLP (Windows) before build 9.0.93212 and Acronis Cyber Protect Cloud Agent (Windows) before build 42183. The NVD/NIST records confirm the vulnerable components are Windows produc...

7.8CVSS7.5AI score0.00107EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/29 1:43 p.m.12 views

EUVD-2026-26233

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP Windows before build 9.0.93212, Acronis Cyber Protect Cloud Agent Windows before build 42183...

7.8CVSS7.5AI score0.00107EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/29 1:43 p.m.7 views

CVE-2026-41220

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP Windows before build 9.0.93212, Acronis Cyber Protect Cloud Agent Windows before build 42183...

7.8CVSS7.5AI score0.00107EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/29 1:43 p.m.46 views

CVE-2026-41220

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP Windows before build 9.0.93212, Acronis Cyber Protect Cloud Agent Windows before build 42183...

7.8CVSS0.00107EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/29 1:42 p.m.14 views

CVE-2026-41952

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP Windows before build 9.0.93212, Acronis Cyber Protect Cloud Agent Windows before build 42183...

7.8CVSS7.5AI score0.00107EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/29 1:42 p.m.9 views

CVE-2026-41952

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP Windows before build 9.0.93212, Acronis Cyber Protect Cloud Agent Windows before build 42183...

7.8CVSS7.5AI score0.00107EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/29 1:42 p.m.28 views

CVE-2026-41952

CVE-2026-41952 : Local privilege escalation in Acronis products due to improper input validation. Affected on Windows: DeviceLock DLP before build 9.0.93212 and Cyber Protect Cloud Agent before build 42183. CVSSv3.0: LOCAL attack, LOW complexity, LOW privileges, NO user interaction; impacts inclu...

7.8CVSS7.5AI score0.00107EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/29 1:42 p.m.41 views

CVE-2026-41952

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP Windows before build 9.0.93212, Acronis Cyber Protect Cloud Agent Windows before build 42183...

7.8CVSS0.00107EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/29 1:42 p.m.13 views

EUVD-2026-26234

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP Windows before build 9.0.93212, Acronis Cyber Protect Cloud Agent Windows before build 42183...

7.8CVSS7.5AI score0.00107EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/29 9:16 a.m.14 views

CVE-2025-10503

The authentication endpoint accepts user-supplied input without enforcing expected validation constraints, leading to a lack of proper output encoding. This allows for the injection of malicious JavaScript payloads, enabling reflected cross-site scripting. An attacker can leverage this...

6.1CVSS0.00173EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/29 8:41 a.m.13 views

CLSA-2026-1777452099 nettle: Fix of CVE-2021-3580

CVE-2021-3580: add input validation to RSA decrypt family and length check to pkcs1secdecrypt...

7.5CVSS5.8AI score0.02708EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/29 8:37 a.m.13 views

CLSA-2026-1777451834 nettle: Fix of CVE-2021-3580

CVE-2021-3580: add input validation to RSA decrypt family and length check to pkcs1secdecrypt...

7.5CVSS5.8AI score0.02708EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/29 8:08 a.m.28 views

CVE-2025-10503

WSO2 Identity Server: CVE-2025-10503 is a reflected cross-site scripting flaw in the authentication endpoint caused by insufficient output encoding for user-supplied input. This allows injection of malicious JavaScript payloads that can redirect users, alter the UI, or retrieve information from t...

6.1CVSS5.4AI score0.00173EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/04/29 8:08 a.m.13 views

EUVD-2025-209586

The authentication endpoint accepts user-supplied input without enforcing expected validation constraints, leading to a lack of proper output encoding. This allows for the injection of malicious JavaScript payloads, enabling reflected cross-site scripting. An attacker can leverage this...

6.1CVSS5.3AI score0.00173EPSS
SaveExploits0References1
Veracode
Veracode
added 2026/04/29 6:40 a.m.20 views

Improper Input Validation

org.springframework.security:spring-security-oauth2-authorization-server is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of client metadata fields during dynamic client registration, which allows an attacker to register a malicious client and exploi...

9.6CVSS5.2AI score0.00479EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/04/29 1:19 a.m.23 views

CVE-2026-7345

An insufficient validation of untrusted input flaw was found in the Feedback component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502248774...

8.3CVSS5.2AI score0.00306EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/29 12:00 a.m.20 views

PT-2026-35925

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP Windows before build 9.0.93212, Acronis Cyber Protect Cloud Agent Windows before build 42183...

7.8CVSS7.5AI score0.00107EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/29 12:00 a.m.17 views

wget2 输入验证错误漏洞

wget2 is a network file retrieval tool from the American GNU community that supports high-performance concurrent downloads and modern protocol features. wget2 has a vulnerability related to input validation. This vulnerability arises from accepting server certificates with incorrect key purposes ...

4.8CVSS5.8AI score0.00155EPSS
SaveExploits1References1
Redos
Redos
added 2026/04/29 12:00 a.m.15 views

ROS-20260429-73-0041

A vulnerability in the incoming traffic controller in a Kubernetes ingress-nginx cluster is related to insufficient input validation. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code...

8.8CVSS6.8AI score0.01494EPSS
SaveExploits1
Rows per page
Query Builder