Lucene search
+L

77254 matches found

Snyk
Snyk
added 2026/03/23 6:16 p.m.14 views

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the NGAP message handling process. An attacker can cause the application to panic and potentially crash by sending specially crafted messages with invalid PDU Session IDs. Remediation Upgrade...

7.5CVSS6.4AI score0.00393EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/23 6:14 p.m.5 views

Out-of-bounds Read

Overview github.com/shamaton/msgpack/v2/internal/decoding is a Affected versions of this package are vulnerable to Out-of-bounds Read. due to improper validation of input in the fixext process. An attacker can cause the application to panic and terminate unexpectedly by sending specially crafted...

8.7CVSS5.8AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/03/23 5:49 p.m.12 views

valkey: Valkey: Denial of Service via invalid clusterbus packet

A flaw was found in Valkey, a distributed key-value database. A malicious actor with access to the Valkey clusterbus port can exploit an input validation vulnerability by sending a specially crafted invalid clusterbus packet. This lack of validation for clusterbus ping extension packets can lead ...

7.5CVSS5.7AI score0.00762EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/03/23 3:26 p.m.14 views

gimp: GIMP: Remote Code Execution via out-of-bounds write in XWD file parsing

A flaw was found in GIMP. The specific flaw exists within the parsing of XWD files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the conte...

7.8CVSS6AI score0.04642EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/03/23 3:26 p.m.13 views

gimp: GIMP: Remote Code Execution via out-of-bounds write in XWD file parsing

A flaw was found in GIMP. The specific flaw exists within the parsing of XWD files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the conte...

7.8CVSS6AI score0.04642EPSS
SaveExploits0References6
NCSC
NCSC
added 2026/03/23 1:43 p.m.13 views

Vulnerabilities fixed in Citrix Netscaler ADC and Netscaler Gateway

Citrix has fixed vulnerabilities in their software related to insufficient input validation and a race condition in session management. The input validation vulnerability occurs because the software does not correctly check for input sizes or limits, which can lead to memory overreads. This can...

9.8CVSS5.8AI score0.87166EPSS
SaveExploits7References1
Microsoft CVE
Microsoft CVE
added 2026/03/23 7:45 a.m.9 views

Chromium: CVE-2026-4451 Insufficient validation of untrusted input in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS5.8AI score0.00253EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/03/23 5:29 a.m.9 views

CVE-2025-10679

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to arbitrary method calls in all versions up to, and including, 2.2.12. This is due to insufficient input validation in the bulkTenReviews function that...

7.3CVSS6.6AI score0.00447EPSS
SaveExploits0References6
CVE
CVE
added 2026/03/23 5:29 a.m.24 views

CVE-2025-10679

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More WordPress plugin (up to v2.2.12) is vulnerable due to insufficient input validation in the bulkTenReviews function, allowing user-controlled data to be passed to a variable function call ...

7.3CVSS6.6AI score0.00447EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/03/23 5:29 a.m.6 views

CVE-2025-10679 ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Limited Remote Code Execution

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to arbitrary method calls in all versions up to, and including, 2.2.12. This is due to insufficient input validation in the bulkTenReviews function that...

7.3CVSS6.6AI score0.00447EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/03/23 2:43 a.m.18 views

cpython: IMAP command injection in user-controlled commands

A flaw was found in the imaplib module in the Python standard library. The imaplib module does not reject control characters, such as newlines, in user-controlled input passed to IMAP commands. This issue allows an attacker to inject additional commands to be executed in the IMAP server...

5.9CVSS7AI score0.00374EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/03/23 2:17 a.m.19 views

cpython: IMAP command injection in user-controlled commands

A flaw was found in the imaplib module in the Python standard library. The imaplib module does not reject control characters, such as newlines, in user-controlled input passed to IMAP commands. This issue allows an attacker to inject additional commands to be executed in the IMAP server...

5.9CVSS7AI score0.00374EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/03/23 12:00 a.m.15 views

Droplet Agent 安全漏洞

Droplet Agent is an open-source tool developed by DigitalOcean for managing and monitoring DigitalOcean Droplets. Versions of Droplet Agent prior to 1.3.2 contain security vulnerabilities. These vulnerabilities stem from the fault diagnosis executor component failing to properly validate inputs...

8.8CVSS6.6AI score0.02502EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2026/03/23 12:00 a.m.18 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an integer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on the system...

8.8CVSS6.3AI score0.0034EPSS
SaveExploits0References3
Redos
Redos
added 2026/03/23 12:00 a.m.14 views

ROS-20260323-73-0031

A vulnerability in the ksmbdsmb2checkmessage function of the fs/smb/server/smb2misc.c module of the Linux kernel SMB server support is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

9.1CVSS5.8AI score0.00293EPSS
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2026/03/23 12:00 a.m.13 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0094-1 Rating: important References: 1259964 Cross-References: CVE-2026-4439 CVE-2026-4440 CVE-2026-4441 CVE-2026-4442 CVE-2026-4443 CVE-2026-4444 CVE-2026-4445 CVE-2026-4446 CVE-2026-4447 CVE-2026-4448...

8.8CVSS7.1AI score0.00415EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2026/03/23 12:00 a.m.9 views

PT-2026-27144

Name of the Vulnerable Software and Affected Versions cgltf versions prior to 1.15 Description cgltf versions prior to 1.15 contain an integer overflow issue in the cgltf validate function when validating sparse accessors. This allows attackers to trigger out-of-bounds reads by providing speciall...

8.4CVSS6AI score0.00135EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/03/23 12:00 a.m.17 views

Tiki 安全漏洞

Tiki is a set of open-source content management and portal applications developed by the Tiki community. It can be used to create web applications, portals, intranets, extranets, etc. Version 21.2 of Tiki contains a security vulnerability, which stems from insufficient input validation of the...

5.4CVSS5.6AI score0.00195EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/03/23 12:00 a.m.13 views

Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2025-38430)

In the Linux kernel, the following vulnerability has been resolved: nfsd: nfsd4spomustallow must check this is a v4 compound request If the request being processed is not a v4 compound request, then examining the cstate can have undefined results. This patch adds a check that the rpc procedure...

9.8CVSS6.2AI score0.00503EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/23 12:00 a.m.6 views

Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2025-38451)

In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix GPF in bitmapgetstats The commit message of commit 6ec1f0239485 md/md-bitmap: fix stats collection for external bitmaps states: Remove the external bitmap check as the statistics should be available regardless o...

5.5CVSS5.9AI score0.0015EPSS
SaveExploits0References2
Rows per page
Query Builder