212969 matches found
CVE-2026-82740: Improper Input Validation
Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested :array, :array, type attribute, letting invalid input pass validation. Ash.Type.applyconstraints/3 lib/ash/type/type.ex handled the :array, :array, type case by mapping only...
PT-2026-84467
Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A daemon in AOS-CX improperly processes malformed input. An unauthenticated remote attacker can exploit this by sending specially crafted packets to the affected service, potentially leading t...
PT-2026-84468
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Issues in the authentication module may lead to the improper processing of malformed or truncated input. An authenticated remote attacker can exploit this by...
CVE-2026-73768: Improper Input Validation
A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result in the execution of arbitrary commands with root privileges...
ROS-20260901-73-0049
The vulnerability in Netty is related to the incorrect checking of the specified data type for input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ArcadeDB 26.8.0 Path Traversal
ArcadeDB contains a path traversal vulnerability in the create database and drop database server commands. An authenticated root user can supply a crafted database name containing directory traversal sequences to create database files outside the configured database directory or recursively delet...
PT-2026-84105
The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsddisplstyle' Parameter in all versions up to, and including, 5.8.1 due to insufficient input sanitization and output escaping. This makes it possible f...
input-remapper.service Injection
The vulnerability of the input-remapper.service service, a device management tool for input devices, is related to the lack of authentication. Exploiting this vulnerability allows an attacker to switch the service to a specified configuration directory and activate the mechanism for injecting...
PT-2026-84104
The Affiliate Super Assistent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘doCommentShortcode’ function in all versions up to, and including, 1.10.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
PT-2026-84256
Name of the Vulnerable Software and Affected Versions Erlang/OTP versions 21.0 through 27.3.4.16 Erlang/OTP versions 28.0 through 28.5.0.5 Erlang/OTP versions 29.0 through 29.0.5 stdlib versions 3.5 through 6.2.2.4 stdlib versions 7.0 through 7.3.0.1 stdlib versions 8.0 through 8.0.3 Description...
PUB-A-463368136
In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-467351933
In Cellular Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-529876547
In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-511630167
In smmudetachdevnested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
PUB-A-508747905
In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-397216638
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-492425798
Bulletin has no description...
PT-2026-84089
Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested :array, :array, type attribute, letting invalid input pass validation. Ash.Type.apply constraints/3 lib/ash/type/type.ex handled the :array, :array, type case by mapping only...
TencentOS Server 2: libsolv (TSSA-2026:0942)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0942 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
