209095 matches found
CVE-2026-106263: Improper Input Validation
Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
PT-2026-107300
Name of the Vulnerable Software and Affected Versions Backstage versions prior to 3.3.1 Backstage versions prior to 3.4.1 Backstage versions prior to 4.0.3 Backstage versions prior to 4.1.0 Description The @backstage/plugin-scaffolder-backend package contains an authorization bypass regarding...
PT-2026-107279
Name of the Vulnerable Software and Affected Versions Backstage versions prior to 0.17.8 Description The @backstage/backend-defaults package contains improper input validation within cloud storage URL readers. An attacker possessing write access to a cloud storage bucket utilized by the framework...
PT-2026-106746
Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394...
PT-2026-106357
Memory Corruption when executing system service routines due to improper handling of user input buffers...
Cisco ASA Stack-based Buffer Overflow (CVE-2021-34704)
A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper input validation when...
Cisco ASA Improper Input Validation (CVE-2020-3166)
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system OS. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted...
Linux Distros Unpatched Vulnerability : CVE-2026-59783
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability...
Cisco ASA Stack-based Buffer Overflow (CVE-2021-1573)
A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper input validation when...
Cisco ASA Basic XSS (CVE-2024-20382)
A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a browser that is accessing an affected...
Linux Distros Unpatched Vulnerability : CVE-2026-104042
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sssd. A local attacker can cause a Denial of Service DoS by sending a crafted Pluggable Authentication Module PAM request containing a...
Cross-Virtual-Fabric Context Switching and Horizontal Privilege Escalation in Brocade Fabric OS
: An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with restricted privileges in one Virtual Fabric can exploit this issue by submitting a specially crafted request containing an arbitrary...
CVE-2026-82989 CVE-2026-82989
There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...
CVE-2026-82989 CVE-2026-82989
There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...
CVE-2026-82989
ViewSonic ViewBoard smartboards, which run on an Android-based system, are vulnerable to an input injection flaw in the vCast software suite. The vulnerability exists in exposed network services, allowing a remote, unauthenticated attacker to inject arbitrary input into service endpoints via HTTP...
CVE-2023-43144
CVE-2023-43144 الوصف Assets Management System 1.0 عرضة لحقن SQL عبر المُعامِل id في delete.php PoC sqlmap -u 'http://localhost/delete.php?id=4' --cookie="PHPSESSID=SESSID" --dbms=MySQL --dbs --batch مراجعة الكود delete.php ?php include 'core/init.php'; $id = $GET'id'; deletedata$con,$id;...
CVE-2024-36401-GeoServer-RCE
ثغرة RCE في GeoServer CVE-2024-36401 - سكربت الكشف CVE-2024-36401 هي ثغرة أمنية حرجة تؤثر على GeoServer، وهو خادم مفتوح المصدر لمشاركة البيانات الجغرافية المكانية، وعلى GeoTools، وهي مكتبة Java مفتوحة المصدر توفر أدوات للبيانات الجغرافية المكانية. تتيح هذه الثغرة، التي تم تصنيفها كخلل في تنفيذ...
CVE-2023-38890
CVE-2023-38890 وصف مشروع بوابة التسوق عبر الإنترنت V3.1 يسمح للمهاجمين عن بُعد بتنفيذ استعلامات SQL تعسفية عبر نموذج تسجيل الدخول، مما يؤدي إلى وصول غير مصرح به واحتمال التلاعب بالبيانات. ينشأ هذا الثغرة بسبب عدم كفاية التحقق من صحة الإدخال المقدم من المستخدم في حقل اسم المستخدم، مما يتيح هجمات ح...
CVE-2023-4549
Identifiant CVE : CVE-2023-4549 Type de vulnérabilité : Cross-Site Scripting Description : Le plugin DoLogin Security pour WordPress est vulnérable à une faille de Cross-Site Scripting stocké via l'en-tête 'X-Forwarded-For' dans les versions jusqu'à la 3.6 incluse, en raison d'une désinfection...
CVE-2026-105683
Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0...