3124 matches found
Astra Linux – Vulnerability in docker.io-app
BuildKit is a toolkit for converting source code into build artifacts in an efficient, expressive, and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components might allow access to files outside the checked-out Git repository root. Access was...
PT-2026-91235
Description A submitted topology carries two lists of blobstore keys, dependency jars and dependency artifacts, which the client fills in after uploading the corresponding blobs. Nimbus performed no validation of their contents on the submission path, yet acts on them in two places. During cleanu...
ROS-20260914-73-0066
The vulnerability of DevTools components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...
ROS-20260914-73-0125
The vulnerability of the Input component in Google Chrome and Microsoft Edge is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Vulnerabilities of Cisco IOS XR operating systems, related to insufficient validation of message correctness or data structure, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Cisco IOS XR operating systems is related to insufficient checks for the correctness of messages or data structures. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
PT-2026-91462
Name of the Vulnerable Software and Affected Versions IBM Verify Identity Access affected versions not specified Description Insufficient validation of incoming request resources could allow a remote attacker to cause a denial of service, which is a condition where the system becomes unavailable ...
CVE-2026-90546
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the like.json.php endpoint, allowing logged-in users to record likes on password-protected and group-restricted videos. Attackers can submit like requests for videos they cannot watch...
EUVD-2026-76137
MoguBlog through 6.2 fails to validate the comment author identity in the POST /web/comment/add endpoint, allowing authenticated users to post comments attributed to any other user. Attackers can supply arbitrary userUid values in the request body to impersonate other accounts including...
EUVD-2026-76063
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ad impressions in plugin/ADServer/log.php, allowing logged-in users to submit arbitrary label values that trigger unverified wallet credits to campaign video owners. Attackers can repeatedly POST label=start requests...
ROS-20260911-73-0125
A vulnerability in the ANGLE component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of user-supplied data. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service by using a specially crafted HTML page...
ROS-20260911-73-0069
The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
ROS-20260911-73-0052
The vulnerability of the Spellcheck component in Google Chrome and Microsoft Edge relates to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
ROS-20260911-73-0218
The vulnerability of Google Chrome’s Password Manager component is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to replace the user interface...
ROS-20260911-73-0132
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created video file...
ROS-20260911-73-0045
The vulnerability of the Serial component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
CVE-2026-79592
An out-of-bounds read vulnerability exists in the xlsdumpSummary function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets...
DEBIAN-CVE-2026-79592
An out-of-bounds read vulnerability exists in the xlsdumpSummary function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets...
CVE-2026-79591
A heap-buffer-overflow and use-after-free vulnerability exists in the xlsgetCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...