Lucene search
K

72597 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2026/04/14 12:0 a.m.12 views

Microsoft SharePoint Server Improper Input Validation Vulnerability

Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS5.8AI score0.24172EPSS
In wildExploits1
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.5 views

Microsoft Office Sharepoint Server 输入验证错误漏洞

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A spoofing...

6.5CVSS6.2AI score0.24172EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.7 views

Fortinet FortiNAC-F 输入验证错误漏洞

Fortinet FortiNAC-F is a network access control solution developed by the American company Fortinet. This product is primarily used for network access control and IoT security protection. Vulnerabilities exist in versions 7.6.0 to 7.6.5, 7.4, and 7.2 of Fortinet FortiNAC-F, due to input validatio...

4.8CVSS6AI score0.00209EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.4 views

PT-2026-32729

Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description Improper input validation allows an unauthorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information about a newer version that...

7.8CVSS6.2AI score0.00536EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.6 views

Adobe ColdFusion 输入验证错误漏洞

Adobe ColdFusion is a rapid application development platform provided by Adobe Inc. This platform includes an integrated development environment and a scripting language. The version Adobe ColdFusion 2023.18, as well as versions prior to 2025.6, have a vulnerability related to input validation...

8.4CVSS6.2AI score0.00298EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.6 views

Adobe Connect 跨站脚本漏洞

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that is caused by improper validation of user-supplied input. An attacker could exploit the vulnerability to steal the victim's...

9.3CVSS5.6AI score0.00304EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.2 views

PT-2026-32790

CVE-2026-27928 | Microsoft Windows Server 2016 | Vulnerability Description Improper input validation in Windows Hello allows unauth attackers to bypass a security feature over a network by sending malformed input, enabling unauthorized access to protected functionality. Severity: High Exploitatio...

8.7CVSS6.2AI score0.00408EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.7 views

Adobe ColdFusion 输入验证错误漏洞

Adobe ColdFusion is a rapid application development platform provided by Adobe Inc. This platform includes an integrated development environment and a scripting language. The version Adobe ColdFusion 2023.18, as well as versions prior to 2025.6, have a vulnerability related to input validation...

7.5CVSS6.7AI score0.00693EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.5 views

PT-2026-32922

ColdFusion | Improper Input Validation CWE-20 CVE: CVE-2026-27306 PT ID: PT-2026-32922 Vendor: Adobe Product: ColdFusion CVSS: 8.4 Credits: n/a Description: ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary co...

8.4CVSS6.5AI score0.00298EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.4 views

Fortinet FortiWeb 输入验证错误漏洞

Fortinet FortiWeb is a Web application layer firewall developed by the American company Fortinet. It can block threats such as cross-site scripting, SQL injection, cookie poisoning, and schema poisoning, ensuring the security of web applications and protecting sensitive database content. FortiWeb...

4.9CVSS6.7AI score0.00366EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.8 views

Microsoft Windows Hello 输入验证错误漏洞

Microsoft Windows Hello is a biometric login method provided by the American company Microsoft. It allows users to log in using their face, fingerprint, or PIN. There is an input validation vulnerability in Microsoft Windows Hello. Attackers can exploit this vulnerability to bypass certain...

8.7CVSS5.8AI score0.00408EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.6 views

PT-2026-32965

Name of the Vulnerable Software and Affected Versions mcp-server-kubernetes versions prior to 3.5.0 Description An argument injection issue exists in the port forward tool within the startPortForward function located in src/tools/port forward.ts. The tool constructs a kubectl command using string...

8.3CVSS5.4AI score0.00258EPSS
Exploits0References8
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.5 views

Microsoft Azure Monitor Agent 输入验证错误漏洞

Microsoft Azure Monitor Agent is a monitoring agent program from Microsoft USA. A security vulnerability exists in Microsoft Azure Monitor Agent. An attacker can exploit the vulnerability to elevate privileges...

7.8CVSS5.8AI score0.00307EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.3 views

PT-2026-32675

Name of the Vulnerable Software and Affected Versions PowerChute Serial Shutdown affected versions not specified Description Improper validation of specified quantity in input occurs when a Web Admin user alters the payload of the 'POST /logsettings' request. This issue can lead to Event and Data...

5.3CVSS5.8AI score0.0017EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.9 views

PT-2026-32948

Adobe Framemaker versions 2022.8 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to access sensitive files or data on the system. Exploitation of this issue requires user interactio...

6.3CVSS5.9AI score0.00155EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.5 views

PT-2026-32920

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction...

9.3CVSS6.3AI score0.04047EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.7 views

Adobe Connect 跨站脚本漏洞

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that is caused by improper validation of user-supplied input. An attacker could exploit the vulnerability to steal the victim's...

6.1CVSS5.6AI score0.00225EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.3 views

PT-2026-32775

Name of the Vulnerable Software and Affected Versions Windows BitLocker affected versions not specified Description Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature, specifically Secure Boot, locally. This issue poses a risk to data...

7.7CVSS6.2AI score0.00303EPSS
Exploits0References12
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.7 views

SUSE SLES15 / openSUSE 15 Security Update : python312 (SUSE-SU-2026:1292-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1292-1 advisory. - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to...

7.5CVSS5.8AI score0.00621EPSS
Exploits0References16
NVD
NVD
added 2026/04/13 10:16 p.m.2 views

CVE-2026-22563

A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Port Version 1.0.24 and earlier Mitigation: Update UniFi Play...

9.8CVSS0.01051EPSS
Exploits0References1
Rows per page
Query Builder