ROS-20260907-73-0092

The vulnerability in dotnet10.0 is related to the lack of validation for input data during cyclic operations. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260907-73-0059

The vulnerability in Erlang relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2022-51013: Improper Input Validation

PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received from clients. Attackers can send negative or out-of-range damage values in itemstack NBT to trigger unhandled exceptions in the Durable class, causing server crashes...

CVE-2022-51015: Improper Input Validation

PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket for STARTBREAK and CRACKBREAK actions or in UseItemTransactionData typically within InventoryTransactionPacket. A remote authenticated attacker can send crafted packets with invalid facing values e.g., negative or...

PT-2026-86670

HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security issues...

PT-2026-86815

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.46 Description Unauthenticated or weakly constrained request paths allow persistent work without adequate input bounds or rate limiting. Specifically, the '/users/forgot password-reset' endpoint accepts an...

PT-2026-86779

PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, allowing uncapped values to exceed the 32767 byte TAG String limit. Attackers can submit oversized skin data fields like skinID or geometryName to trigger exceptions during NBT dat...

PT-2026-86915

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...

ROS-20260907-73-0091

The vulnerability in dotnet8.0 is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause a service failure...

VulnCheck KEV: CVE-2023-37569

This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system. Successful exploitation of this vulnerability could allow the attacker ...

ROS-20260907-73-0079

The vulnerability of Intel UEFI microprogramming systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

ROS-20260907-73-0077

The vulnerability of UEFI microprogramming systems of Intel processors is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260907-73-0086

The vulnerability of UEFI microprogramming systems of Intel processors is related to deficiencies in input data validation. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260907-73-0021

The vulnerability in the buildkit is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-86430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and...

Linux Distros Unpatched Vulnerability : CVE-2026-80882

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Ensure the ENOMEM...

TencentOS Server 4: iperf3 (TSSA-2026:0958)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0958 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

ROS-20260907-73-0089

The vulnerability in dotnet9.0 is related to the lack of validation for input data during cyclic operations. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2022-51010: Improper Input Validation

PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. Attackers can send crafted item IDs outside the valid range to trigger an uncaught exception that crashes the server...

PT-2026-86930

Name of the Vulnerable Software and Affected Versions knowns versions prior to 0.30.0 Description Insufficient validation of filesystem paths in MCP tool arguments allows attackers to perform directory traversal. By supplying path arguments containing traversal sequences, an attacker can read,...