212076 matches found
CVE-2026-82003 Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20)
Adobe Campaign Classic ACC is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the...
CVE-2026-82008 Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20)
Adobe Campaign Classic ACC is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require...
EUVD-2026-84654
Adobe Campaign Classic ACC is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require...
CVE-2026-82008
Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability (CWE-20) that allows a low-privileged attacker to achieve arbitrary code execution in the context of the current user. Exploitation does not require user interaction. Adobe has released security updates to addr...
CVE-2026-82008 Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20)
Adobe Campaign Classic ACC is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require...
CVE-2026-93345 MikroTik RouterOS < 7.25beta4 Improper Input Validation DoS via BGP Labelled-VPN NLRI
MikroTik RouterOS before 7.25beta4 contains an improper input validation vulnerability in the labelled-VPN NLRI iterators of the routing service that allows an unauthenticated on-path attacker to crash the BGP service by sending a malformed MPREACHNLRI UPDATE message with a prefix-length value...
CVE-2026-93345 MikroTik RouterOS < 7.25beta4 Improper Input Validation DoS via BGP Labelled-VPN NLRI
MikroTik RouterOS before 7.25beta4 contains an improper input validation vulnerability in the labelled-VPN NLRI iterators of the routing service that allows an unauthenticated on-path attacker to crash the BGP service by sending a malformed MPREACHNLRI UPDATE message with a prefix-length value...
EUVD-2026-84569
MikroTik RouterOS before 7.25beta4 contains an improper input validation vulnerability in the labelled-VPN NLRI iterators of the routing service that allows an unauthenticated on-path attacker to crash the BGP service by sending a malformed MPREACHNLRI UPDATE message with a prefix-length value...
Plex Media Server has a vulnerability related to input validation errors.
Versions of Plex Media Server prior to 1.43.3.10861 contain a vulnerability related to input validation errors. This vulnerability arises from the TranscoderH264Options preference being appended to the x264 option string unchanged, and because all .so files are executed without signature, executi...
CVE-2026-65111
NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...
EUVD-2026-84404
NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...
CVE-2026-89420 Session voucher adding no new funds is accepted without a charge in mpp, serving paid resources for free
Improper Validation of Specified Quantity in Input in ZenHive mpp allows a client holding an open payment channel to obtain paid resources without being charged. MPP.Session.Actions.acceptvoucher/3 in lib/mpp/session/actions.ex treats a voucher whose cumulativeAmount equals the channel's...
CVE-2026-89420 Session voucher adding no new funds is accepted without a charge in mpp, serving paid resources for free
Improper Validation of Specified Quantity in Input in ZenHive mpp allows a client holding an open payment channel to obtain paid resources without being charged. MPP.Session.Actions.acceptvoucher/3 in lib/mpp/session/actions.ex treats a voucher whose cumulativeAmount equals the channel's...
CVE-2026-89420 Session voucher adding no new funds is accepted without a charge in mpp, serving paid resources for free
Improper Validation of Specified Quantity in Input in ZenHive mpp allows a client holding an open payment channel to obtain paid resources without being charged. MPP.Session.Actions.acceptvoucher/3 in lib/mpp/session/actions.ex treats a voucher whose cumulativeAmount equals the channel's...
Security Bulletin: Due to the use of Apache ActiveMQ All, IBM Sterling Control Center is vulnerable to Improper Authorization and Improper Input Validation (CVE-2026-59878, CVE-2026-61487)
Summary Apache ActiveMQ All is used by IBM Sterling Control Center as part of dependency in activemq-all-5.19.0.jar. Vulnerability Details CVEID:CVE-2026-59878 DESCRIPTION: Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote...
CVE-2026-76974
SAP Fiori Launchpad does not sufficiently validate certain user-controlled input. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated user, causes the browser to load attacker-controlled content from an external location. This could be used to exfiltrat...
CLSA-2026-1789740100 postgresql: Fix of 13 CVEs
CVE-2026-6471: logical decoding: require the output plugin to be a recognised, installed plugin rather than an arbitrary path, so a non-superuser holding REPLICATION can no longer make the server dlopen any file it can read CVSS 7.2 - CVE-2026-16239: portal/cursor lifecycle: re-creating a cursor...
EUVD-2026-84253
SAP Fiori Launchpad does not sufficiently validate certain user-controlled input. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated user, causes the browser to load attacker-controlled content from an external location. This could be used to exfiltrat...
CVE-2024-27564
CVE-2024-27564 Описание: Уязвимость в pictureproxy.php позволяет удалённым злоумышленникам выполнять произвольные запросы путём внедрения URL-адресов в параметр url. Эта SSRF-уязвимость может быть использована без аутентификации, что делает её особенно опасной. Уязвимый код находится в файле...
PT-2026-114450
Уязвимость наборов библиотек Content Credentials SDK связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти ограничения безопасности...