CVE-2026-92903 Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings

Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious project configuration file or craft command-line input can...

EUVD-2026-81428

Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious project configuration file or craft command-line input can...

CVE-2026-92903 Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings

Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious project configuration file or craft command-line input can...

CVE-2026-66269

Dell OpenManage Server Administrator , versions prior to 11.1.0.3 , contains an Unsafe Reflection vulnerability in which externally controlled input is used to select classes or code. An unauthenticated attacker with remote network access could exploit this flaw, resulting in a protection mechani...

CVE-2026-91738

An improper input validation flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=536450979...

kernel: xfrm: input: hold netns during deferred transport reinjection

A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...

kernel: xfrm: input: hold netns during deferred transport reinjection

A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...

CVE-2025-15697

The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone they can induce to submit a crafted request...

CVE-2025-15697 Dictionary <= 1.0 - Reflected XSS via Multiple Parameters

The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone they can induce to submit a crafted request...

CVE-2025-15697 Dictionary <= 1.0 - Reflected XSS via Multiple Parameters

The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone they can induce to submit a crafted request...

CVE-2025-15697

The Dictionary WordPress plugin (versions

CVE-2025-59607

Memory Corruption when copying large input data exceeds normal allocation limits...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

CVE-2025-59607

CVE-2025-59607 is an Untrusted Pointer Dereference vulnerability in Qualcomm Windows Compute , where memory corruption occurs when copying large input data that exceeds normal allocation limits. The flaw is rated HIGH (CVSS 7.8) with a local attack vector, low complexity, and low privileges requi...

CVE-2025-59607 Untrusted Pointer Dereference in Windows Compute

Memory Corruption when copying large input data exceeds normal allocation limits...

PT-2026-94678

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the logitech-hidpp driver where the hidpp ff init function fails to properly clean up resources during an initialization failure. Specifically, if allocations for the...

PT-2026-94158

Name of the Vulnerable Software and Affected Versions Dictionary WordPress plugin versions prior to 1.1 Description The plugin fails to escape user input before reflecting it in the responses of several directly accessible scripts. This allows unauthenticated attackers to execute Reflected...

PT-2026-94246

Name of the Vulnerable Software and Affected Versions rcourtman Pulse versions 6.0.4 and 6.1.0-rc.4 Description Improper input validation occurs in the Quick Security Setup Handler component when processing the Username argument within the fmt.Sprintf function at the '/api/security/quick-setup'...

CVE-2026-45723: Improper Input Validation

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, managementServer.CreateSchematic in internal/backend/grpc/schematics.go passes the caller-controlled TalosVersion field to imageFactoryClient.OverlaysVersions without validating it as a version. An...

PT-2026-105025

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized HEADER or METHOD frame during client login and cause unsigned size t underflow in amqp handle input in librabbitmq/amqp connection.c. The parser subtracts HEADER SIZE, fixe...