PT-2026-68491

Name of the Vulnerable Software and Affected Versions OMICRON StationGuard version 4.00 Description Improper input validation occurs during the processing of IEC 61850 Sampled Values SV frames. A specially crafted SV frame can cause the responsible process to terminate, which disrupts the...

EulerOS 2.0 SP15 : perl-HTTP-Tiny (EulerOS-SA-2026-2899)

According to the versions of the perl-HTTP-Tiny packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.x000D x000D The...

ROS-20260806-73-0033

The vulnerability of the damonreclaimapplyparameters function in the mm/damon/reclaim.c module, a memory-management subsystem of the Linux operating system, is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an attacker to trigge...

PT-2026-68698

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description Insufficient validation of untrusted input in Workers allows a remote attacker who has compromised the renderer process to bypass site isolation through the use of a crafted HTML page...

CVE-2026-19169: Improper Input Validation

Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

CVE-2026-19177: Improper Input Validation

Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-68437

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description The user self-signup flow fails to adequately validate user-supplied input, allowing arbitrary unvalidated data to be included within user claims. These claims are subsequently used by...

CVE-2026-19153: Improper Input Validation

Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-19164: Improper Input Validation

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-19143: Improper Input Validation

Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially perform a sandbox escape via a malicious file. Chromium security severity: High...

CVE-2024-10302: Improper Input Validation

The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allows arbitrary unvalidated data to be included within user claims, which are then used by downstream processes. Allowing unvalidated input into user claims can lead to various...

CVE-2024-6541: Improper Input Validation

The Class Mediator fails to correctly validate or sanitize messageContext properties when they are used to populate dynamic values. This allows authenticated users to potentially access or modify data across different system invocations that should be isolated. This weakness can lead to the...

CVE-2026-16316: Improper Input Validation

OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values SV frame processing. A specially crafted SV frame can cause the affected process to terminate, disrupting alert processing for Sampled Values traffic. The vulnerability does not affect...

CVE-2026-57817: Improper Input Validation

The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the chash parameter when operating in the Hybrid Flow. If an Apache CXF RP is integrated with a non-compliant or misconfigured Identity Provider IdP that omits the chash, the RP becomes vulnerable to Authorization Code...

IBM Langflow OSS Code Execution Vulnerability (CNVD-2026-32373)

IBM Langflow OSS is the open-source version of Langflow that IBM officially integrates and promotes. IBM Langflow OSS has a code execution vulnerability. This vulnerability stems from improper handling of HTTP requests, allowing attackers to execute arbitrary code on the server by exploiting this...

Improper Validation of Specified Quantity in Input

Overview @nuxt/nitro-server is a Nitro server integration for Nuxt Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via the v-for in server-side rendering of islands or server components. An attacker can cause the server to allocate excessive...

CVE-2026-9081

IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery SSRF vulnerability in the validatemodelproviderkey function for the Ollama provider. The function accepts a user-supplied OLLAMABASEURL parameter and passes it directly to requests.get without...

net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation

A flaw was found in Net::IMAP, a Ruby library that implements Internet Message Access Protocol IMAP client functionality. This vulnerability arises from improper input validation when handling ID field values and arguments to the enable command. A remote attacker could exploit this by injecting...

net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation

A flaw was found in Net::IMAP, a Ruby library that implements Internet Message Access Protocol IMAP client functionality. This vulnerability arises from improper input validation when handling ID field values and arguments to the enable command. A remote attacker could exploit this by injecting...

CVE-2026-20308

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service DoS attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could...