210012 matches found
PT-2026-91721
Name of the Vulnerable Software and Affected Versions IBM i Access Family versions 1.1.2.0 through 1.1.9.15 Description IBM i Access Client Solutions contains an issue where improper validation of user-supplied input in the STRPCCMD CL command allows an authenticated user to execute arbitrary...
PT-2026-91555
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7 iPadOS versions prior to 26.7 iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description An integer...
PT-2026-91105
Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla 20.0.0, Users Anywhere extension for Joomla 2.1.0 - Articles Anywhere Pro and Users Anywhere Pro return values from request-input data tags without making them safe for the context in which the tag is use...
FMP/NOTIFY Protocol DoS
The vulnerability of the FMP/NOTIFY protocol in Wireshark, a network traffic analyzer, is related to the lack of checks on input data during cyclic operations. Exploiting this vulnerability can allow attackers to cause service failures...
Ad Adobe Campaign Classic Code Execution
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
SAP NetWeaver Application Server ABAP Data Compromise
The vulnerability of SAP NetWeaver Application Server ABAP software integration platforms is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
PT-2026-91581
Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description An integer overflow occurs due to insufficient input validation, which may allow an application to cause unexpected syst...
ROS-20260914-73-0078
The vulnerability of Google Chrome and Microsoft Edge web browsers relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
ROS-20260914-73-0023
The vulnerability of the Cast component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...
ROS-20260914-73-0045
The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
ROS-20260914-73-0055
The vulnerability of the Chromoting component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
ROS-20260914-73-0115
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially crafted HTML page...
CVE-2026-84541: Improper Limitation of a Pathname to a Restricted Directory
An input validation issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An application may be able to access restricted files...
PT-2026-91484
Name of the Vulnerable Software and Affected Versions iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 Description A memory corruption issue exists where processing a maliciously crafted file may lead to unexpected app termination. This was addressed by...
PT-2026-91686
Name of the Vulnerable Software and Affected Versions iOS versions prior to 27 iPadOS versions prior to 27 Description An input validation issue exists where an attacker within radio range can cause unexpected system termination. Recommendations Update iOS to version 27. Update iPadOS to version ...
CVE-2026-85196: Improper Neutralization of Input During Web Page Generation
Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla 20.0.0, Users Anywhere extension for Joomla 2.1.0 - Articles Anywhere Pro and Users Anywhere Pro return values from request-input data tags without making them safe for the context in which the tag is use...
CVE-2026-84538: Improper Input Validation
A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause a denial-of-service...
PAN-OS Command Line Arbitrary Command Execution
The vulnerability of the command-line interface of the PAN-OS operating system is related to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands on behalf of the root user...
CVE-2026-90957: Improper Neutralization of Input During Web Page Generation
Affected versions of MISP serve uploaded SVG images inline without a restrictive browser sandbox. The commit explains that SVG files are XML documents rather than passive bitmap images. While scripts inside SVG do not execute when the SVG is rendered through a normal , they can execute when the S...
