210734 matches found
ROS-20260907-73-0091
The vulnerability in dotnet8.0 is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2022-51017: Improper Input Validation
PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, allowing uncapped values to exceed the 32767 byte TAGString limit. Attackers can submit oversized skin data fields like skinID or geometryName to trigger exceptions during NBT data...
CVE-2022-51011: Improper Input Validation
PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs before splitting them by newline characters, allowing attackers to send large messages containing many newlines. Malicious clients can send megabyte-sized chat packets and bombard the server with thousan...
ROS-20260907-73-0059
The vulnerability in Erlang relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
TencentOS Server 4: iperf3 (TSSA-2026:0958)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0958 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
ROS-20260907-73-0042
The vulnerability in Erlang is related to incorrect input of configuration data. Exploitation of this vulnerability can be carried out remotely...
PT-2026-86779
PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, allowing uncapped values to exceed the 32767 byte TAG String limit. Attackers can submit oversized skin data fields like skinID or geometryName to trigger exceptions during NBT dat...
ROS-20260907-73-0086
The vulnerability of UEFI microprogramming systems of Intel processors is related to deficiencies in input data validation. Exploiting this vulnerability can allow attackers to enhance their privileges...
PT-2026-86815
Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.46 Description Unauthenticated or weakly constrained request paths allow persistent work without adequate input bounds or rate limiting. Specifically, the '/users/forgot password-reset' endpoint accepts an...
PT-2026-86990
Name of the Vulnerable Software and Affected Versions Easy Appointments versions prior to 4.0.2.2 Description Insufficient input sanitization and output escaping lead to DOM-Based and Stored Cross-Site Scripting XSS, a condition where arbitrary web scripts are injected into pages and executed whe...
PT-2026-86873
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log...
ROS-20260907-73-0082
The vulnerability of the XmlCli function in Intel UEFI microprocessors is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
Linux Distros Unpatched Vulnerability : CVE-2026-80882
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Ensure the ENOMEM...
Fortinet FortiClient DNS Modification Code Execution
The vulnerability of the Fortinet FortiClient Windows security tool lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to remotely alter or forge DNS responses for the target host and execute arbitrary code using specially...
Linux Distros Unpatched Vulnerability : CVE-2026-86430
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and...
VulnCheck KEV: CVE-2023-37569
This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system. Successful exploitation of this vulnerability could allow the attacker ...
CVE-2026-86219
Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...
CVE-2026-82751
Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for provisioning an access key on the client's own account. When the server sponsor...
CVE-2026-82750 Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation
Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for EIP-7702 account delegations of the client's choosing. When the server sponsors...
EUVD-2026-72147
Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for provisioning an access key on the client's own account. When the server sponsor...