212827 matches found
ROS-20260915-73-0180
The vulnerability of the StorageAccessAPI component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
PT-2026-91861
Name of the Vulnerable Software and Affected Versions moment versions 2.29.2 through 2.30.1 Description A path-traversal issue exists when a specially crafted non-string object is passed to the moment.locale function. The internal guard assumes the input is a string; however, an object with a mat...
ROS-20260915-73-0071
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
CVE-2026-56831: Improper Input Validation
Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts negative fixedamount discount values, persists them in shdiscounts, and passes them through vendor/shopper/cart/src/Discounts/DiscountCalculator.php and...
PT-2026-92322
In validate ns buf of mbu class.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
PT-2026-92330
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds write can occur in the Start function of AudioRtpPayloadEncoderNode.cpp due to improper input validation. This issue may allow remote code...
ROS-20260915-73-0125
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...
ROS-20260915-73-0132
The vulnerability of the InterestGroups component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
CVE-2026-79410: Improper Input Validation
Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce their order total below the legitimate price of shippable goods...
PT-2026-93194
Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wake up set.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory...
CVE-2026-13210: Incorrect Authorization
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to access CI/CD variables outside their intended environment scope due to improper input...
CVE-2026-91722: Use After Free
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-92475
Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 140.16 Thunderbird versions prior to 153.3 Thunderbird versions prior to 156 Description An out-of-bounds buffer read can be triggered by a maliciously constructed IMAP line. An out-of-bounds read occurs when the...
ROS-20260915-73-0155
The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
PT-2026-92148
Name of the Vulnerable Software and Affected Versions IBM Verify Identity Access affected versions not specified Description Improper validation of user supplied input could allow an administrator to execute additional commands they are not entitled to. Recommendations At the moment, there is no...
ROS-20260915-73-0193
The vulnerability of the New Tab Page component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity through a specially created HTML page...
CVE-2026-91738: Improper Input Validation
Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91738: Improper Input Validation
Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-92366
In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...