CVE-2026-21551: Improper Input Validation

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2026-59650: Improper Input Validation

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

PT-2026-67191

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2026-69198: Improper Input Validation

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask is shorter than the reference range's mask. Th...

CVE-2026-69192: Improper Input Validation

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inetaton, and getaddrinfo all decode a leading zero as octal. The library...

CVE-2026-69192: Improper Input Validation

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inetaton, and getaddrinfo all decode a leading zero as octal. The library...

PT-2026-67186

In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed...

Hanwha Vision Cameras OS Command Injection (CVE-2024-54012)

Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to...

Lexmark Printers Improper Input Validation (CVE-2013-6032)

cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344, X64xef through LC2.TI.P325, C935dn through LC.JO.P091, C920 through LS.TA.P15...

PT-2026-67188

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

PT-2026-67192

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2026-67976

The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...

PT-2026-67193

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2026-21554: Improper Input Validation

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2026-38446

A stored cross-site scripting XSS vulnerability exists in osTicket 1.18.3 due to improper sanitization of the thread entry title field. User-controlled input in the title is stored without adequate HTML escaping and later rendered in multiple staff-facing templates without proper output encoding...

ROS-20260803-73-0021

The vulnerability of the stmmactsoxmit function in the drivers/net/ethernet/stmicro/stmmac/stmmacmain.c file of the Ethernet driver module from STMicroelectronics’ operating system Linux is related to the lack of proper validation for incoming requests. Exploiting this vulnerability could allow a...

DbGate JSON Script Runner Code Execution

The vulnerability of the JSON Script Runner component in a cross-platform application for browsing and modifying database data in the DbGate browser is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Google Chrome GPU DoS

The vulnerability of Google Chrome’s GPU component is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

shouldBypassProxy.js Module Disclosure

The vulnerability of the shouldBypassProxy.js library from axios is related to incorrect validation of data entered by users. Exploiting this vulnerability can allow an attacker to disclose protected information...

Google Chrome DoS

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...