210690 matches found
PT-2026-88304
Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim mus...
ROS-20260908-73-0062
The vulnerability in nvidia-kmod is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260908-73-0050
The vulnerability in nvidia-kmod is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
PT-2026-87396
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an unauthorized attacker to perform spoofing over a network...
PT-2026-88431
Name of the Vulnerable Software and Affected Versions Okta Access Gateway affected versions not specified Description The software fails to sanitize SAML assertion attribute values before they are interpolated into LDAP search filters within the LDAP datastore configuration. Because raw values ar...
CVE-2026-78626: Incorrect Authorization
The Okta Access Gateway improperly handles input sanitization and regular expression evaluation within its Protected Rule authorization check, resulting in an authorization bypass when an administrator has explicitly configured a Protected Rule policy on one or more application resources...
ROS-20260908-73-0090
The vulnerability in Ruby is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
ROS-20260908-73-0106
The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
PT-2026-88157
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...
ROS-20260908-73-0082
The vulnerability of Google Chrome and Microsoft Edge web browsers’ Bluetooth components stems from the absence of a mechanism for verifying input data on the server side. Exploiting this vulnerability allows an attacker to bypass the sandboxing protection mechanisms...
PT-2026-88255
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Improper input validation in the AppendCommentLine function within AnnotationProcessor.cpp creates a supply chain risk. This flaw allows for local escalation of...
PT-2026-88437
Name of the Vulnerable Software and Affected Versions Okta Access Gateway affected versions not specified Description Improper input sanitization and regular expression evaluation within the Protected Rule authorization check allow for an authorization bypass. This occurs when an administrator ha...
PT-2026-88267
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Improper input validation in multiple functions within iommu.c allows for out-of-bounds read and write operations. This issue can be exploited to achieve local...
Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0
Summary A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. Impact An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into...
PT-2026-87437
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
ROS-20260908-73-0051
The vulnerability in xorg-x11-drv-nvidia is related to insufficient input validation. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
PT-2026-87617
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-79574
An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...
ROS-20260908-73-0061
The vulnerability in xorg-x11-drv-nvidia is related to insufficient input validation. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
PT-2026-88569
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in Extensions allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can...