94247 matches found
CVE-2026-21551: Improper Input Validation
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
PT-2026-67191
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-69198: Improper Input Validation
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask is shorter than the reference range's mask. Th...
CVE-2026-69192: Improper Input Validation
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inetaton, and getaddrinfo all decode a leading zero as octal. The library...
CVE-2026-69192: Improper Input Validation
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inetaton, and getaddrinfo all decode a leading zero as octal. The library...
PT-2026-67188
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
PT-2026-67192
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-67976
The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...
PT-2026-67193
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-21554: Improper Input Validation
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-38446
A stored cross-site scripting XSS vulnerability exists in osTicket 1.18.3 due to improper sanitization of the thread entry title field. User-controlled input in the title is stored without adequate HTML escaping and later rendered in multiple staff-facing templates without proper output encoding...
CVE-2026-59650: Improper Input Validation
In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12...
Hanwha Vision Cameras Improper Input Validation (CVE-2024-54011)
Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and...
DbGate JSON Script Runner Code Execution
The vulnerability of the JSON Script Runner component in a cross-platform application for browsing and modifying database data in the DbGate browser is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Google Chrome DoS
The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
PT-2026-76171
Issue Summary: The PKCS12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 PBMAC1 integrity mechanism allowing a certificate and private key forgery. Impact Summary: An attacker impersonating a user can cause a service...
ROS-20260803-73-0021
The vulnerability of the stmmactsoxmit function in the drivers/net/ethernet/stmicro/stmmac/stmmacmain.c file of the Ethernet driver module from STMicroelectronics’ operating system Linux is related to the lack of proper validation for incoming requests. Exploiting this vulnerability could allow a...
Hanwha Vision Cameras OS Command Injection (CVE-2024-54012)
Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to...
Lexmark Printers Improper Input Validation (CVE-2013-6032)
cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344, X64xef through LC2.TI.P325, C935dn through LC.JO.P091, C920 through LS.TA.P15...