Lucene search
+L

76629 matches found

CNNVD
CNNVD
added 2026/04/14 12:00 a.m.15 views

Adobe Connect 跨站脚本漏洞

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that is caused by improper validation of user-supplied input. An attacker could exploit the vulnerability to steal the victim's...

9.3CVSS5.6AI score0.00304EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.11 views

PT-2026-32819

CVE-2026-32149 Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally. https://t.co/jAvCgQ0s60...

7.3CVSS6.4AI score0.00317EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/04/14 12:00 a.m.16 views

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is an operating system used on personal devices by the American company Microsoft. The Microsoft Windows Server Update Service has a vulnerability related to input validation errors, which stem from incorrect input validation. The following products and versions are affected:...

7.5CVSS5.8AI score0.01064EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.12 views

PT-2026-32976

Name of the Vulnerable Software and Affected Versions free5GC versions 4.2.1 and earlier Description A fail-open request handling flaw exists in the UDR service. The PUT handler for the endpoint '/nudr-dr/v2/policy-data/subs-to-notify/subsId' does not terminate execution after request body...

6.9CVSS6AI score0.00321EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.14 views

PT-2026-32675

Name of the Vulnerable Software and Affected Versions PowerChute Serial Shutdown affected versions not specified Description Improper validation of specified quantity in input occurs when a Web Admin user alters the payload of the 'POST /logsettings' request. This issue can lead to Event and Data...

5.3CVSS5.8AI score0.0017EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.12 views

PT-2026-32768

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description Improper input validation allows an authorized attacker to bypass a security feature locally, which can affect the system. Recommendations At the moment, there is no information about a...

4.6CVSS6.2AI score0.00387EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2026/04/14 12:00 a.m.14 views

libsixel 输入验证错误漏洞

Libsixel is a software package developed by Hayaki Saito, which provides encoding/decoding implementations for DEC SIXEL graphics and other conversion programs. Versions of Libsixel 1.8.7 and earlier contained a vulnerability related to input validation errors. This vulnerability stemmed from an...

7.1CVSS6.3AI score0.00205EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.24 views

PT-2026-32965

Name of the Vulnerable Software and Affected Versions mcp-server-kubernetes versions prior to 3.5.0 Description An argument injection issue exists in the port forward tool within the startPortForward function located in src/tools/port forward.ts. The tool constructs a kubectl command using string...

8.3CVSS5.4AI score0.00258EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/04/14 12:00 a.m.17 views

Microsoft Windows Hello 输入验证错误漏洞

Microsoft Windows Hello is a biometric login method provided by the American company Microsoft. It allows users to log in using their face, fingerprint, or PIN. There is an input validation vulnerability in Microsoft Windows Hello. Attackers can exploit this vulnerability to bypass certain...

8.7CVSS5.8AI score0.00408EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:00 a.m.11 views

SUSE SLES15 / openSUSE 15 Security Update : python312 (SUSE-SU-2026:1292-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1292-1 advisory. - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to...

7.5CVSS5.8AI score0.0069EPSS
SaveExploits0References16
BDU FSTEC
BDU FSTEC
added 2026/04/14 12:00 a.m.8 views

The vulnerability of the `bpf_skb_is_valid_access` function in the `net/core/filter.c` module, which is part of the Linux kernel’s BPF interpreter support, allows a malicious actor to trigger a service failure.

The vulnerability of the bpfskbisvalidaccess function in the net/core/filter.c module, which is part of the Linux kernel’s BPF interpreter support, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.7AI score0.00193EPSS
SaveExploits0References9Affected Software3
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.14 views

PT-2026-32853

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description An improper input...

6.5CVSS6.7AI score0.42814EPSS
SaveExploits1References154
CISA KEV Catalog
CISA KEV Catalog
added 2026/04/14 12:00 a.m.35 views

Microsoft SharePoint Server Improper Input Validation Vulnerability

Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS5.8AI score0.42814EPSS
SaveIn wildExploits1
NVD
NVD
added 2026/04/13 10:16 p.m.9 views

CVE-2026-22565

An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop responding. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Port Version 1.0.24 and earlier Mitigation: Update UniFi Play...

7.5CVSS0.00432EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/13 10:16 p.m.9 views

CVE-2026-22563

A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Port Version 1.0.24 and earlier Mitigation: Update UniFi Play...

9.8CVSS0.01051EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/13 9:28 p.m.27 views

CVE-2026-22563

A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Port Version 1.0.24 and earlier Mitigation: Update UniFi Play...

9.8CVSS0.01051EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/13 9:28 p.m.9 views

CVE-2026-22563

A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Port Version 1.0.24 and earlier Mitigation: Update UniFi Play...

9.8CVSS5.8AI score0.01051EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/13 9:28 p.m.4 views

CVE-2026-22563

A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Port Version 1.0.24 and earlier Mitigation: Update UniFi Play...

9.8CVSS5.8AI score0.01051EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/13 9:28 p.m.6 views

CVE-2026-22565

An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop responding. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Port Version 1.0.24 and earlier Mitigation: Update UniFi Play...

5.8AI score0.00432EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/13 9:28 p.m.7 views

CVE-2026-22565

An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop responding. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Port Version 1.0.24 and earlier Mitigation: Update UniFi Play...

5.8AI score0.00432EPSS
SaveExploits0References1
Rows per page
Query Builder