94245 matches found
EUVD-2026-52549
Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...
PT-2026-67570
Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...
PT-2026-67687
Name of the Vulnerable Software and Affected Versions Samsung Open Source rlottie affected versions not specified Description Improper input validation allows the processing of oversized serialized data payloads. Recommendations At the moment, there is no information about a newer version that...
Important: dotnet10.0
Issue Overview: Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. CVE-2026-47300 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
ROS-20260804-73-0026
The vulnerability of the gfs2dinodein function in the fs/gfs2/dir.c file of the GFS2 file system in the Linux operating system is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-70589: Improper Input Validation
Ghost is a Node.js content management system. From 4.22.0 until 6.54.1, a missing validation check allowed users to redeem subscription offers that were no longer active. This issue is fixed in version 6.54.1...
CVE-2026-18830: Improper Validation of Specified Type of Input
Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addressed this issue. No customer action is required...
ROS-20260804-73-0025
The vulnerability of the net/hsr/hsrslave.c component in the Linux operating system is related to incorrect syntax validation during input processing. Exploiting this vulnerability allows an attacker to cause service failures...
PT-2026-67789
Name of the Vulnerable Software and Affected Versions Amazon Bedrock AgentCore affected versions not specified Description Insufficient input validation in the AgentCore harness may allow an authenticated remote user to execute configured tools. This is achieved by using crafted content blocks in...
ONLYOFFICE Desktop Editors Code Execution
The vulnerability of the ONLYOFFICE Desktop Editors office package lies in the lack of validation during the processing of incoming requests. Exploiting this vulnerability allows an attacker to execute arbitrary code...
FreeRDP RDP Server DoS
The vulnerability of the rdpeiserverhandlemessages function in the channels/rdpei/server/rdpeimain.c file of the RDP client FreeRDP is related to insufficient input validation. Exploiting this vulnerability could allow a malicious actor to cause service failures...
JLSEC-2026-1134 Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files...
Issue Summary: The PKCS12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 PBMAC1 integrity mechanism allowing a certificate and private key forgery. Impact Summary: An attacker impersonating a user can cause a service...
Security Bulletin: IBM QRadar SIEM is vulnerable to remote code execution by privileged users
Summary An authenticated QRadar SIEM administrator can execute arbitrary commands on the QRadar host due to improper validation of user supplied input. Vulnerability Details CVEID:CVE-2026-13477 DESCRIPTION: QRadar could allow an authenticated privileged user to execute arbitrary commands with...
Exploit for Improper Input Validation in Cisco Ios_Xe
No d...
frr: FRRouting: Denial of Service via crafted BGP UPDATE message
A flaw was found in FRRouting FRR. Missing input validation in the rfapiRibBi2Ri function allows a remote attacker to cause a Denial of Service DoS by sending a specially crafted BGP Border Gateway Protocol UPDATE message. This vulnerability can disrupt network services managed by FRR...
CVE-2026-21553
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-21555
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-21554
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...