Lucene search
K

72521 matches found

Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.10 views

PT-2026-43274

Name of the Vulnerable Software and Affected Versions FastNetMon Community Edition versions prior to 1.3.0 Description An OS command injection issue exists in the Juniper router integration plugin. The log function in src/juniper plugin/fastnetmon juniper.php constructs shell commands by...

9.8CVSS5.5AI score0.0141EPSS
Exploits1References17
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.6 views

PT-2026-48581

Уязвимость обучающей платформы IQ SCHOOL связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...

6.8CVSS5.4AI score
Exploits0References1
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.7 views

NVIDIA Display Driver 输入验证错误漏洞

NVIDIA Display Driver is a graphics driver developed by NVIDIA Corporation. NVIDIA Display Driver has a vulnerability related to input validation errors. This vulnerability stems from improper permission allocation in the kernel driver code, which may lead to data corruption and denial of service...

4.4CVSS5.8AI score0.00175EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.9 views

FastNetMon 安全漏洞

FastNetMon is a high-performance DDoS detector/sensor developed by Pavel Odintsov, based on multiple packet capture engines. Versions of FastNetMon prior to 1.2.9 contain security vulnerabilities. These vulnerabilities stem from the lack of validation or cleaning of IP address variables in the...

8.1CVSS5.8AI score0.00234EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.12 views

PT-2026-43370

Name of the Vulnerable Software and Affected Versions IBM HTTP Server versions 8.5 and 9.0 IBM WebSphere Application Server versions 8.5 and 9.0 IBM WebSphere Application Server Liberty versions 8.5 and 9.0 Description IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty...

10CVSS6AI score0.00488EPSS
Exploits0References8
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.8 views

NVIDIA Display Driver 输入验证错误漏洞

NVIDIA Display Driver is a graphics driver developed by NVIDIA Corporation. NVIDIA Display Driver has a vulnerability related to input validation errors. This vulnerability arises from improper input validation by users within the User Virtual Machine UVM, which may lead to denial-of-service...

7.1CVSS5.8AI score0.00172EPSS
Exploits0References3
Amazon
Amazon
added 2026/05/26 12:0 a.m.13 views

Medium: perl-Net-CIDR-Lite

Issue Overview: Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different...

6.5CVSS5.8AI score0.00311EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.10 views

PT-2026-43338

Name of the Vulnerable Software and Affected Versions NVIDIA Display Driver for Linux affected versions not specified Description A flaw exists in the Unified Video Memory UVM component due to improper input validation. This issue allows a user to trigger a condition that may result in a denial o...

7.1CVSS5.2AI score0.00172EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.20 views

libsolv 安全漏洞

Libsolv is a library in OpenSUSE that is used for checking software package dependencies. Libsolv has a security vulnerability, which stems from insufficient input validation when decompressing compressed data controlled by an attacker. This leads to a heap buffer overflow, potentially causing...

7.8CVSS5.9AI score0.00158EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.12 views

PT-2026-43071

Name of the Vulnerable Software and Affected Versions hackney versions 0 through 4.0.0 Description Improper Neutralization of CRLF Sequences allows HTTP Request Splitting. The software fails to percent-encode carriage return r or line feed characters in the URL query component before constructing...

7.5CVSS5.9AI score0.00394EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.7 views

PT-2026-48578

Уязвимость обучающей платформы IQ SCHOOL связана с недостатками проверки вводимых пользователем данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить хэши паролей других пользователей...

6.8CVSS5.4AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/05/25 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-9277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - shell-quote's quote function did not validate object-token inputs against the operator model used by parse. The .op field was backslash-escaped character by...

9.2CVSS5.7AI score0.00552EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/05/24 12:0 a.m.9 views

SPIP 输入验证错误漏洞

SPIP is an open-source software developed by SPIP for creating Internet websites. Versions of SPIP prior to 4.4.15 had a vulnerability related to input validation errors, which stemmed from an open-redirecting vulnerability in the action/cookie.php file within ecrire...

3.5CVSS5.8AI score0.00225EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/05/23 8:12 a.m.13 views

CVE-2026-34910

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection...

10CVSS5.8AI score0.04509EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/05/23 8:12 a.m.11 views

CVE-2026-33000

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection...

9.1CVSS5.8AI score0.01107EPSS
Exploits0References1
Veracode
Veracode
added 2026/05/23 5:51 a.m.10 views

Improper Input Validation

com.ibeetl:beetl-spring-classic is vulnerable to Improper Input Validation. The vulnerability is due to improper neutralization of special elements in expression language statements within the SpELFunction component, which allows an attacker to inject and execute malicious expressions remotely...

7.5CVSS7.2AI score0.00406EPSS
Exploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2026/05/23 2:12 a.m.13 views

CVE-2026-35433

A flaw was found in dotnet. Improper input validation and an integer overflow in .NET allow an unauthenticated attacker to elevate privileges locally. Mitigation Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example...

7.3CVSS5.8AI score0.00528EPSS
Exploits0References4
NVD
NVD
added 2026/05/22 11:16 p.m.12 views

CVE-2026-40411

Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network...

9.9CVSS0.00724EPSS
Exploits0References1
NVD
NVD
added 2026/05/22 11:16 p.m.8 views

CVE-2026-26147

Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

7.7CVSS0.00772EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/22 10:3 p.m.5 views

CVE-2026-26147

Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

7.7CVSS5.8AI score0.00772EPSS
Exploits0References2
Rows per page
Query Builder