PT-2026-24259

Name of the Vulnerable Software and Affected Versions System Center Operations Manager affected versions not specified Description Improper input validation exists in System Center Operations Manager, potentially allowing an authorized attacker to elevate privileges over a network. Recommendation...

Mitsubishi Electric多款产品 安全漏洞

Mitsubishi Electric CNC Series is a series of numerical control control systems developed by Mitsubishi Electric, a Japanese company. Several products from Mitsubishi Electric have security vulnerabilities. These vulnerabilities stem from improper validation of specified indices, positions, or...

PT-2026-24490

Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable data manipulation. This result may potentially occur via local access when...

ImageMagick 输入验证错误漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-16 and 6.9.13-41 contained a vulnerability related to input validation errors. This vulnerability...

PT-2026-24325

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper validation of a specified type of input in SQL Server can allow an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information...

Sylius 输入验证错误漏洞

Sylius is an open-source e-commerce platform developed by the Polish company Sylius, based on the Symfony framework. Sylius has a vulnerability related to input validation. This vulnerability arises from multiple controllers directly using the HTTP Referer header for redirection, which can lead t...

Adobe DNG SDK 输入验证错误漏洞

Adobe DNG SDK is the United States of America Audobee Adobe company's a software development kit to provide the ability to read and write DNG files. An input validation error vulnerability exists in Adobe DNG SDK, which can be exploited by an attacker to cause a denial of service in an applicatio...

The vulnerability of the php_array_merge_wrapper function in the PHP programming language allows attackers to compromise data integrity and cause service failures.

The vulnerability of the phparraymergewrapper function in the PHP programming language is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to compromise data integrity and also cause service failures...

The vulnerability of the stm32_fmc2_nand.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the stm32fmc2nand.c component of the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Microsoft Windows Routing and Remote Access Service 输入验证错误漏洞

The Microsoft Windows Routing and Remote Access Service is a network service provided by Microsoft that enables network routing, virtual private networks VPNs, and dial-up connections. There is an input validation vulnerability in the Microsoft Windows Routing and Remote Access Service. Attackers...

ROS-20260310-73-0049

Vulnerability in golang-k8s-ingress-nginx related to insufficient input validation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

Microsoft SharePoint 输入验证错误漏洞

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

PT-2026-24306

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A flaw exists in the Windows Ancillary Function Driver for WinSock due to improper input validation. This allows a local attacker to gain elevated privileges. The issue affects all...

rssn 代码问题漏洞

rssn is a high-performance Rust scientific computing library open source by Apich Organization. rssn has code vulnerabilities, which stem from improper input validation in the JIT compilation engine, potentially allowing arbitrary code execution...

PT-2026-24404

IBM Aspera Orchestrator 3.0.0 through 4.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacki...

Pocket ID 输入验证错误漏洞

Pocket ID is an open-source identity provider that supports passwordless authentication. Versions of Pocket ID from 2.0.0 to 2.4.0 had a vulnerability related to input validation errors. This vulnerability stemmed from defects in the callback URL validation process, which could lead to the...

Intel Processors 输入验证错误漏洞

Intel Processors are a series of processors developed by the American company Intel. Intel Processors have a vulnerability related to input validation, which stems from improper input validation and may lead to privilege escalation. System software attackers with privileged access can potentially...

PluXml 安全漏洞

PluXml is an open-source, free content management system developed by PluXml. It works without the need for a database. PluXml versions 5.8.22 and earlier contained security vulnerabilities. These vulnerabilities stemmed from insufficient cleaning or validation of user inputs related to the artic...

Misskey 授权问题漏洞

Misskey is an open-source, permanently free social media platform developed by Misskey. Versions of Misskey from 8.45.0 until 2026.3.1 had an authorization issue vulnerability. This vulnerability stemmed from insufficient permission checks and input validation, which could lead to severe data...

IBM Aspera Faspex 安全漏洞

IBM Aspera Faspex is a solution developed by American multinational company IBM for rapid global personal-to-person file delivery and collaboration. Versions 5.5.0 to 5.0.14.3 of IBM Aspera Faspex contain security vulnerabilities. These vulnerabilities stem from improper input validation of the...