209234 matches found
PT-2026-104788
Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Input Data Manipulation.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.1.1...
ROS-20261005-73-0096
The vulnerability in dotnet9.0 is related to the incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
PT-2026-104755
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.11.109...
PT-2026-104684
Name of the Vulnerable Software and Affected Versions apu affected versions not specified Description Improper input validation in apu can lead to memory corruption, which may allow a local escalation of privilege without requiring additional execution privileges or user interaction...
PT-2026-106202
Name of the Vulnerable Software and Affected Versions ash versions 3.5.1 through 3.34.2 Description Ash stores :atom-typed attributes as strings and compares them as strings. When such an attribute is used in a filter, the comparison value is processed through Ash.Type.Atom. Due to the absence of...
ROS-20261005-73-0133
The vulnerability of the kawethprobe function in the drivers/net/usb/kaweth.c module of the Linux USB network adapter driver framework is related to improper validation of consistency checks in input data. Exploiting this vulnerability could allow an attacker to cause service failures...
CVE-2026-103351: Improper Validation of Specified Quantity in Input
Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Input Data Manipulation.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.1.1...
CVE-2026-58834: Improper Input Validation
In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-97275: Improper Validation of Specified Quantity in Input
Improper Validation of Specified Quantity in Input vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Input Data Manipulation.This issue affects BuildKit – Product Builder for WooCommerce – Custom PC Builder: from n/a through 1.0....
CVE-2026-105060: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Logo Showcase logo-showcase allows Stored XSS.This issue affects Logo Showcase: from n/a through 4.0.4...
CVE-2026-93317: Improper Validation of Integrity Check Value
An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity...
CVE-2026-42700: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Image Slider Widget image-slider-widget allows Stored XSS.This issue affects Image Slider Widget: from n/a through 1.1.130...
CVE-2026-101919: Improper Input Validation
A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration kubeconfig secrets directly into the privileged control plane namespace without proper validation or sanitization. An authenticated user with cluster and secret creation permissions can exploit...
The vulnerability of the software platform for conducting Adobe Campaign Classic marketing campaigns stems from insufficient validation of input data, allowing a hacker to execute arbitrary code.
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
ROS-20261005-73-0028
The vulnerability in rsync is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Cisco ASA Improper Input Validation (CVE-2019-1687)
A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to restart unexpectedly, resulting in a denial of service DoS condition. The...
ROS-20261005-73-0104
The vulnerability in the net/netfilter/nftablesapi.c module of the Linux operating system is related to insufficient input data validation. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-105757: Improper Input Validation
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. A per-request backend mismatch can re-raise a grammar compilation exception, padding produced by t...
PT-2026-106063
An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity...
PT-2026-106158
In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...