212968 matches found
PT-2026-84154
LibreNMS before 26.5.0 contains stored cross-site scripting vulnerabilities in VRF display pages where mplsVpnVrfDescription, vrf name, and mplsVpnVrfRouteDistinguisher fields from SNMP polling are rendered without sanitization. Attackers controlling a monitored network device can inject arbitrar...
PUB-A-512585238
In validatensbuf of mbuclass.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
PUB-A-512579927
In gftatestsetconfig of gftatest.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-497884669
In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-511557744
In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-84486
Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A flaw in the command line interface allows for the improper processing of malformed input, which could enable an attacker to execute arbitrary commands with root privileges. Recommendations A...
PT-2026-84115
The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tagName' Block Attribute blocksy/dynamic-data in all versions up to, and including, 2.1.51 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
ROS-20260901-73-0029
The vulnerability in the incus is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
NRF RegisterNFInstance handler of Unauthorized Access
The vulnerability of the NRF RegisterNFInstance handler in the software for fifth-generation mobile communication networks 5G, free5GC, is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected informati...
PT-2026-84387
Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An authenticated user with low-privileged access to the Observability AI Assistant can cause a denial of service by submitting a specially crafted request. This action triggers an unhandled...
CVE-2026-84136: Improper Neutralization of Input During Web Page Generation
Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
CVE-2026-73749: Improper Access Control
Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...
PT-2026-84087
Improper Input Validation vulnerability in ash-project ash allows an attacker to persistently deny reads of a record by storing a non-version-7 UUID in an Ash.Type.UUIDv7 attribute. Ash.Type.UUIDv7.cast input/2 accepts any well-formed UUID string, including non-version-7 UUIDs, and stores it as a...
PT-2026-84090
Improper Validation of Specified Type of Input vulnerability in ash-project ash lets an attacker confuse the stored type tag of an Ash.Type.Union value that uses storage: :map with tag, bypassing that member's validation and any tag-based authorization. For a union with storage: :map with tag, ea...
ASB-A-508703583
In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-84536
Name of the Vulnerable Software and Affected Versions AVideo affected versions not specified Description The setTitle and setDescription functions in Live schedule store POST input without proper sanitization. This allows users with streaming permissions to inject malicious scripts. Additionally,...
PT-2026-84139
Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 06994e303637512e39062f3e037c222e8448e57e...
PUB-A-490030190
In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
TencentOS Server 2: libsolv (TSSA-2026:0942)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0942 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
CVE-2026-9637: Improper Restriction of Operations within the Bounds of a Memory Buffer
A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault MNRF, requiring a power cycle to recover...