209329 matches found
CVE-2026-76711: Improper Input Validation
A vulnerability exists in an Analytics and Location Engine ALE component where the impacted process improperly processes incoming socket connections. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input during the connection process. Successful...
AlmaLinux 8 : libxml2 (ALSA-2026:69655)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:69655 advisory. libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free CVE-2026-6653 Bug Fixes and Enhancements: libxml2: CVE-2025-9714 fi...
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
Arista VeloCloud Orchestrator VCO on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the...
PT-2026-96938
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user...
CVE-2026-19480: Improper Input Validation
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...
ROS-20260922-73-0086
The vulnerability in Tomcat11 is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
PT-2026-96941
Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An improper input validation issue allows for a security feature bypass. An attacker can exploit this to obtain unauthorized limited write access. This requires user...
PT-2026-96985
Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description An improper input validation issue allows for arbitrary code execution within the context of the current user. This occurs when a victim visits a maliciously crafted URL or interacts wi...
PT-2026-96937
Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description Improper input validation can lead to an application denial-of-service, allowing an attacker to crash the application. Exploitation requires user interaction, such as visiting...
ROS-20260922-73-0102
The vulnerability of the 389-ds-base package for Debian GNU/Linux and Red Hat Enterprise Linux exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures when changing the userPassword parameter using improperly...
ROS-20260922-73-0085
The vulnerability in Tomcat10 is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260922-73-0084
The vulnerability in Tomcat is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
NotepadPlusPlus: CVE-2026-77605: Improper Input Validation
Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the file selected by the user. When an attacker places a command script whose name is the selected text-file path with .cmd...
PT-2026-96939
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...
CVE-2026-63628: Improper Input Validation
mppx is a TypeScript interface for machine payments protocol. Prior to 0.8.2, the fee-payer cosigning path in src/tempo/internal/fee-payer.ts copied a client-supplied accesslist from a 0x78 FeePayerEnvelope without validating its length or contents. Because EIP-2930 access-list entries consume...
PT-2026-96975
Name of the Vulnerable Software and Affected Versions mppx versions prior to 0.8.2 Description The fee-payer cosigning path in src/tempo/internal/fee-payer.ts copies a client-supplied access list from a 0x78 FeePayerEnvelope without validating its length or contents. EIP-2930 access-list entries...
CVE-2026-76194: Improper Input Validation
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user...
CVE-2026-93952: Improper Input Validation
VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...
PT-2026-96907
Adobe Campaign Classic ACC is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require...
CVE-2026-63627: Improper Input Validation
mppx is a TypeScript interface for machine payments protocol. Prior to 0.8.2, FeePayerPolicy in src/tempo/internal/fee-payer.ts used decodeFunctionData to validate fee-sponsored calldata but did not reject trailing bytes. A client could append nonzero padding that increased intrinsic calldata gas...