Lucene search
+L

94140 matches found

NVD
NVD
•added 2026/08/11 6:17 a.m.•21 views

CVE-2026-4757

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account...

7.2CVSS0.00569EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/11 6:17 a.m.•25 views

CVE-2026-5304

An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...

5.7CVSS0.00314EPSS
SaveExploits0References1
Veracode
Veracode
•added 2026/08/11 6:04 a.m.•16 views

Improper Input Validation

Apache Camel AWS SNS component is vulnerable to Improper Input Validation. The vulnerability is due to the absence of an inbound header-filtering rule in Sns2HeaderFilterStrategy, which could theoretically allow externally supplied message attributes to be mapped into Camel control headers;...

9.8CVSS6AI score0.00738EPSS
SaveExploits0References3Affected Software2
attackerkb
attackerkb
•added 2026/08/11 5:52 a.m.•27 views

CVE-2026-4757

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account...

7.2CVSS5.8AI score0.00569EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/08/11 5:52 a.m.•63 views

CVE-2026-4757

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account...

7.2CVSS0.00569EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/11 5:52 a.m.•143 views

CVE-2026-4757

The CVE-2026-4757 entry describes an issue in a VAPIX API parameter where improper input validation could allow code execution, leading to privilege escalation. Exploitation requires authentication with an administrator-privileged service account, indicating an authenticated, high-privilege breac...

7.2CVSS6AI score0.00569EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/11 5:52 a.m.•21 views

CVE-2026-4757

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account...

7.2CVSS6AI score0.00569EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 5:52 a.m.•24 views

EUVD-2026-55968

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account...

7.2CVSS5.8AI score0.00569EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/11 5:47 a.m.•24 views

CVE-2026-5304

An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...

5.7CVSS5.3AI score0.00314EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/08/11 5:47 a.m.•19 views

CVE-2026-5304

An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...

5.7CVSS5.8AI score0.00314EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/11 5:47 a.m.•51 views

CVE-2026-5304

An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...

5.7CVSS0.00314EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/11 5:47 a.m.•102 views

CVE-2026-5304

CVE-2026-5304 affects Axis devices via an ACAP configuration file input validation weakness. Exploitation requires the device to allow unsigned ACAP installations and user interaction to install a malicious ACAP app, potentially enabling privilege escalation (CVSS v3.1: 5.7, NETWORK, Privileges R...

5.7CVSS5.8AI score0.00314EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 5:47 a.m.•24 views

EUVD-2026-55965

An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...

5.7CVSS5.3AI score0.00314EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/11 1:17 a.m.•27 views

CVE-2026-44758

SAP Manufacturing Integration and Intelligence MII allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the...

9.1CVSS0.00768EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/11 12:11 a.m.•20 views

CVE-2026-44758 Code Injection vulnerability in Manufacturing Integration and Intelligence

SAP Manufacturing Integration and Intelligence MII allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the...

9.1CVSS6.5AI score0.00768EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/11 12:11 a.m.•31 views

EUVD-2026-55861

SAP Manufacturing Integration and Intelligence MII allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the...

9.1CVSS5.7AI score0.00768EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•18 views

PT-2026-70751

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description Improper input validation allows an unauthorized attacker to disclose information locally. Input validation is the process of ensuring that a program operates on clean, correct, and...

5.5CVSS5.6AI score0.00541EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•14 views

PT-2026-70760

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...

5.5CVSS5AI score0.00435EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•18 views

PT-2026-70750

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

7.8CVSS5AI score0.00466EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•16 views

PT-2026-70757

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description Improper input validation allows an unauthorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer version tha...

5.5CVSS5.1AI score0.00435EPSS
SaveExploits0References3
Rows per page
Query Builder