3123 matches found
chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE
An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518243653...
chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500047428...
chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499124128...
chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE
An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=250000 https://code.google.com/p/chromium/issues/detail?id=492218546...
chromium-browser: angle: Insufficient validation of untrusted input in ANGLE
An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=40073848...
CVE-2026-15801
A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient validation of restore metadata may allow a user with sufficient privileges to perform unintended operations on the host...
EUVD-2026-83169
A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Feed, and Carriage Return, into HTTP/2 header field values due to insufficient validation. When these values cross an HTTP/2 to HTTP/1.1 translation boundary,...
CVE-2026-85123
The Easy Form Builder by WhiteStudio WordPress plugin before 4.2.0 does not validate a submitted value against the stored configuration for some of its form types, allowing unauthenticated users to create WordPress accounts on a site whose owner has disabled registration...
The vulnerability of the Skype for Business Server’s instant messaging program, related to insufficient validation of requests on the server side, allows attackers to disclose protected information.
The vulnerability of the Skype for Business Server’s instant messaging program is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
CVE-2026-76451
A vulnerability in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the...
CVE-2026-20284
A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks. This vulnerability is due to insufficient validation of user-supplied input in REST API calls. An attacker could exploit this vulnerability by sending crafted input to ...
EUVD-2026-81162
A vulnerability in the web-based management interface of Cisco Identify Services Engine ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permissions. An...
CVE-2026-76451 Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability
A vulnerability in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the...
CVE-2026-76449 Cisco Identity Services Engine SQL Injection Vulnerability
A vulnerability in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the...
github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation
A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted...
CVE-2026-11926
The IBM Verify Identity Access software is vulnerable to a denial of service (DoS) attack. This is caused by insufficient validation of incoming request resources , which could allow a remote attacker to trigger uncontrolled resource consumption. While the vulnerability is confirmed, the provided...
EUVD-2026-78893
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...
EUVD-2026-78877
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an attacker to perform JNDI injection attacks due to insufficient input validation,...
CVE-2026-12358
IBM Verify Identity Access and IBM Security Verify Access are vulnerable to a denial of service (DoS) attack due to uncontrolled recursion (CWE-674) caused by insufficient validation of incoming request resources. Affected versions include IBM Verify Identity Access 11.0.0 - 11.0.3 IF1, IBM Secur...
CVE-2026-12358 Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...