Apache MINA SSHD input validation error vulnerability

Apache MINA SSHD is a Java library for client-side and server-side SSH communication. The sshd-git component of Apache MINA SSHD has a vulnerability related to input validation errors. This vulnerability arises from GitPgmCommandFactory failing to properly validate the git commands entered by...

PT-2026-64420

Name of the Vulnerable Software and Affected Versions Tycon Systems TPDIN-Monitor-WEB2 affected versions not specified Description The web management interface fails to perform server-side validation of credentials during the login process. An unauthenticated remote attacker can bypass the...

PT-2026-64243

Name of the Vulnerable Software and Affected Versions Rapid7 InsightVM affected versions not specified Nexpose affected versions not specified Rapid7 Insight Agent versions prior to 0.0.245.0 Rapid7 Scan Engine versions prior to 1.1.3935 Description Rapid7 InsightVM, Nexpose, and the Insight Agen...

PT-2026-64442

Name of the Vulnerable Software and Affected Versions Valibot versions prior to 1.4.2 Description Valibot can throw a TypeError within its flatten helper when validation issues contain object keys controlled by an attacker that collide with inherited Object.prototype properties, such as toString,...

ROS-20260724-73-0018

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

swift-nio-http2: Missing CR/LF/NUL validation in header values

SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters reach an HTTP/1.1 backend through NIOHTTP2's HTTP/2-to-HTTP/1 codec, enabling HTTP request smuggling or response splitting...

PT-2026-64323

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The krb5 crypto library lacks facilities to precheck the length of messages before they are decrypted or verified. This issue affects AF RXRPC when validating DATA packets secured with...

LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges

Insufficient validation of byte array arguments in JNI-based XXHash implementations in lz4-java 1.11.0 and earlier allows callers to crash the JVM by passing an invalid array reference or invalid range to native XXHash methods. This affects applications where an attacker can influence the byte...

PT-2026-64817

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description An origin validation error allows an unauthorized attacker to perform spoofing over a network. Origin validation is a security mechanism used to verify that a request...

ROS-20260724-73-0016

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

ROS-20260724-73-0017

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

PT-2026-64352

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the elan i2c driver where the system fails to validate the firmware size before use. This lack of validation can lead to out-of-bounds reads when accessing the expecte...

Apache Syncope Server Request Forgery Vulnerability (CNVD-2026-30661)

Apache Syncope is an open-source identity management system, primarily used for managing the identity lifecycle and access control of enterprise users. There are security vulnerabilities in Apache Syncope. These vulnerabilities stem from the failure to properly validate user inputs during...

PT-2026-64446

Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.17.0 Description Cloudreve fails to properly validate WOPI access tokens and enforce requested viewer actions. The system generates tokens in the format ., but the middleware.ViewerSessionValidation function only...

PT-2026-64286

Name of the Vulnerable Software and Affected Versions Parse Server versions 9.0.0 through 9.10.0-alpha.4 Parse Server versions 8.2.2 through 8.6.85 Description GraphQL validation error messages reveal the names of required custom input fields even when public introspection is disabled via the...

PT-2026-64305

Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description The ext2 file system fails to verify that the on-disk superblock fields s blocks per group and s inodes per group are non-zero during the mount process in the ext2 verify disk superblock...

ROS-20260724-73-0032

The vulnerability in dotnet10.0 is related to incorrect validation of the specified data type. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

PT-2026-64818

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description An origin validation error allows an unauthorized attacker to disclose information over a network. Origin validation is a security mechanism used to verify that a reques...

MiracleLinux 9 : openssl-3.5.5-4.el9_8.ML.1 (AXSA:2026-1339:14)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1339:14 advisory. openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing CVE-2026-7383 openssl: OpenSSL: Denial of Service due...

The vulnerability of the decoder in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.

The vulnerability of the DCM decoder in the console-based image editing tool ImageMagick is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...