Lucene search
+L

77010 matches found

Positive Technologies
Positive Technologies
added 2026/03/31 12:00 a.m.16 views

PT-2026-29345

Name of the Vulnerable Software and Affected Versions SonicWall Email Security appliance affected versions not specified Description The SonicWall Email Security appliance contains a flaw related to improper input validation. A remote, authenticated attacker with admin privileges can exploit this...

2.7CVSS5.9AI score0.00386EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2026/03/31 12:00 a.m.10 views

The vulnerability of the fuse_read_args_fill() function in the fs/fuse/file.c module, which supports the Linux file system, allows a hacker to cause a service failure.

The vulnerability of the fusereadargsfill function in the fs/fuse/file.c module of the Linux kernel’s file system support mechanism is related to incorrect input data validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00221EPSS
SaveExploits0References19Affected Software2
HPE Security Bulletins
HPE Security Bulletins
added 2026/03/31 12:00 a.m.14 views

HPESBNW05033 rev.1 - HPE Telco Network Function Virtual Orchestrator, Improper Input Validation in the Undertow HTTP Server Core

Potential Security Impact: Local: Input Validation; Remote: Unauthorized Access, Input Validation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Network Function Virtualization Orchestrator HPE Telco Network Function Virtualization Orchestrator v7.5.0 or below. CVSS...

9.6CVSS7AI score0.012EPSS
SaveExploits0
CNVD
CNVD
added 2026/03/31 12:00 a.m.13 views

HCL Aftermarket DPC Input Validation Error Vulnerability

HCL Aftermarket DPC is a digital spare parts and aftermarket management platform for HCL India. HCL Aftermarket DPC suffers from an input validation error vulnerability that can be exploited by an attacker to inject executable code and perform cross-site scripting, SQL injection, command injectio...

9.8CVSS5.9AI score0.00997EPSS
SaveExploits0
CNVD
CNVD
added 2026/03/31 12:00 a.m.20 views

Denial of Service Vulnerability in Multiple Apple Products (CNVD-2026-19045)

Apple iOS is an operating system developed for mobile devices.Apple macOS is a specialized operating system developed for Mac computers.Apple iPadOS is an operating system for iPad tablets. A denial of service vulnerability exists in multiple Apple products, which is caused by improper input...

7.5CVSS5.8AI score0.00665EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/03/31 12:00 a.m.14 views

SonicWALL Email Security 输入验证错误漏洞

SonicWALL Email Security is an email security system developed by the American company SonicWALL. SonicWall Email Security has a vulnerability related to input validation. This vulnerability arises from improper input validation and could lead to denial-of-service attacks...

2.7CVSS5.8AI score0.00386EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/31 12:00 a.m.16 views

SonicWALL Email Security 输入验证错误漏洞

SonicWALL Email Security is an email security system developed by the American company SonicWALL. SonicWall Email Security has a vulnerability related to input validation, which stems from improper input cleansing. This vulnerability may lead to data corruption...

3.8CVSS5.8AI score0.00321EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/03/31 12:00 a.m.9 views

The vulnerability of the tegra241_vcmdq_alloc_smmu_cmdq() function in the drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c file of the Linux operating system’s IOMMU kernel driver allows a attacker to cause a service failure.

The vulnerability of the tegra241vcmdqallocsmmucmdq function in the drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c file of the Linux kernel’s IOMMU support driver is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS6.7AI score0.00197EPSS
SaveExploits0References7Affected Software2
GithubExploit
GithubExploit
added 2026/03/30 10:58 p.m.221 views

Exploit for OS Command Injection in Hoverfly

CVE-2025-54123 - Hoverfly Command Injection RCE PoC CVE-2...

9.8CVSS6.4AI score0.10543EPSS
SaveExploits7
EUVD
EUVD
added 2026/03/30 6:31 p.m.17 views

EUVD-2026-17129

MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...

5.3CVSS5.9AI score0.00434EPSS
SaveExploits1References3
NVD
NVD
added 2026/03/30 5:16 p.m.17 views

CVE-2026-29909

MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...

5.3CVSS0.00434EPSS
SaveExploits1References2
CVE
CVE
added 2026/03/30 3:02 p.m.30 views

CVE-2026-5164

The CVE-2026-5164 entry describes a vulnerability in virtio-win where the RhelDoUnMap() function fails to properly validate the number of descriptors in an unmap request. This input validation flaw can be exploited by a local user who supplies an excessive number of descriptors, potentially causi...

6.7CVSS6AI score0.00112EPSS
SaveExploits0References3Affected Software2
EUVD
EUVD
added 2026/03/30 9:31 a.m.10 views

EUVD-2026-17064

An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their intended scope via path traversal, resulting in exposure of sensitive information...

7.5CVSS5.9AI score0.00309EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/30 8:16 a.m.12 views

CVE-2026-2328

An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their intended scope via path traversal, resulting in exposure of sensitive information...

7.5CVSS0.00309EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/30 6:55 a.m.34 views

CVE-2026-2328 Backend Access Due to Insufficient Input Validation

An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their intended scope via path traversal, resulting in exposure of sensitive information...

7.5CVSS0.00309EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/30 6:55 a.m.4 views

CVE-2026-2328

An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their intended scope via path traversal, resulting in exposure of sensitive information...

7.5CVSS5.9AI score0.00309EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/03/30 6:55 a.m.7 views

CVE-2026-2328 Backend Access Due to Insufficient Input Validation

An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their intended scope via path traversal, resulting in exposure of sensitive information...

7.5CVSS5.9AI score0.00309EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/30 6:55 a.m.21 views

CVE-2026-2328

Technical details about CVE-2026-2328 are not publicly available in the provided documents beyond a generic path-traversal description. Monitor for updates from the referenced advisories for any affected products and fixes.

7.5CVSS5.9AI score0.00309EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/30 12:00 a.m.18 views

PT-2026-29090

Name of the Vulnerable Software and Affected Versions Nginx UI versions prior to 2.3.4 Description An input validation issue in the logrotate configuration allows an authenticated user to cause a Denial of Service DoS. Submitting a negative integer for the rotation interval causes the backend to...

6.9CVSS5.8AI score0.00948EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2026/03/30 12:00 a.m.6 views

CVE-2026-29909

MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...

5.3CVSS5.9AI score0.00434EPSS
SaveExploits1References3
Rows per page
Query Builder