209624 matches found
PT-2026-106063
An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity...
PT-2026-106158
In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-106200
Name of the Vulnerable Software and Affected Versions Ghost versions 5.9.0 through 6.44.0 Description An input validation issue in this Node.js content management system allows members to access comments for which they lack proper authorization. Recommendations Update to version 6.44.1...
ROS-20261005-73-0097
The vulnerability in dotnet8.0 is related to the incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
CVE-2026-101919: Improper Input Validation
A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration kubeconfig secrets directly into the privileged control plane namespace without proper validation or sanitization. An authenticated user with cluster and secret creation permissions can exploit...
Cisco ASA Improper Input Validation (CVE-2020-3304)
A vulnerability in the web interface of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is...
Cisco ASA Command Injection (CVE-2021-1488)
A vulnerability in the upgrade process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to inject commands that could be executed with root privileges on the underlying operating system OS. This...
PT-2026-106205
Name of the Vulnerable Software and Affected Versions Ghost versions 6.14.0 through 6.26.0 Description An input validation issue in this Node.js content management system may allow staff users to access local files located outside the intended data storage directories on the server. Recommendatio...
The vulnerability of the software platform for conducting Adobe Campaign Classic marketing campaigns stems from insufficient validation of input data, allowing a hacker to execute arbitrary code.
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
The vulnerability of the Apache ActiveMQ software platform, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of the Apache ActiveMQ software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Cisco ASA NULL Pointer Dereference (CVE-2024-20426)
A vulnerability in the Internet Key Exchange version 2 IKEv2 protocol for VPN termination of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...
PT-2026-106202
Name of the Vulnerable Software and Affected Versions ash versions 3.5.1 through 3.34.2 Description Ash stores :atom-typed attributes as strings and compares them as strings. When such an attribute is used in a filter, the comparison value is processed through Ash.Type.Atom. Due to the absence of...
CVE-2026-94646
Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift nodejs bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...
Cisco ASA Improper Input Validation (CVE-2019-1687)
A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to restart unexpectedly, resulting in a denial of service DoS condition. The...
ROS-20261005-73-0133
The vulnerability of the kawethprobe function in the drivers/net/usb/kaweth.c module of the Linux USB network adapter driver framework is related to improper validation of consistency checks in input data. Exploiting this vulnerability could allow an attacker to cause service failures...
ROS-20261005-73-0104
The vulnerability in the net/netfilter/nftablesapi.c module of the Linux operating system is related to insufficient input data validation. Exploiting this vulnerability can allow an attacker to cause a service failure...
Exploit for Improper Validation of Consistency within Input in Linux Linux_Kernel
copyfail-check !CIhttps://github.com/ledlight33/copyfail-...
CVE-2026-103344
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 2.0.20 . Exploitation details ...
CVE-2026-97276 WordPress WP Statistics plugin <= 14.16.14 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VeronaLabs WP Statistics wp-statistics allows Reflected XSS.This issue affects WP Statistics: from n/a through 14.16.14...
CVE-2026-103354 WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.11.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Stored XSS.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through 3.7.11.1...