207784 matches found
CVE-2026-110759: Improper Validation of Syntactic Correctness of Input
Text::CSVXS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse. When the input to parse ends in a separator and a lone CR, the parser treats the end of the input as the next character and stores the end-of-file marker i...
Linux Distros Unpatched Vulnerability : CVE-2026-110916
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox...
PT-2026-115915
MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.3.0 until 3.5.4, the zero-configuration TLS fingerprint-validation path calls Ed25519PasswordAuth.hash through Authentication.validateFingerPrint, but Ed25519PasswordAuth.hash...
PT-2026-115510
Name of the Vulnerable Software and Affected Versions Mattermost version 11.10.0 Mattermost versions 11.7.x through 11.7.9 Mattermost versions 11.9.x through 11.9.1 Mattermost versions 11.8.x through 11.8.5 Description An improper order of authorizations in the 'GetFile' API endpoint allows an...
PT-2026-115927
Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1 contains an information disclosure vulnerability in which GraphQL validation error messages reveal hidden class names when public introspection is disabled. Unauthenticated attackers holding only the public Application Id can send crafted...
PT-2026-115874
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular...
PT-2026-115975
Name of the Vulnerable Software and Affected Versions Microsoft Authentication Library MSAL for Node.js affected versions not specified Description An origin validation error allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there is no...
CVE-2026-109461: Origin Validation Error
Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network...
PT-2026-116136
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers...
Zoom Workplace 7.0.x < 7.1.9 / 7.2.0 Improper Certificate Validation (ZSB-26021)
The version of Zoom Workplace installed on the remote host is 7.0.x prior to 7.1.9 / 7.2.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-26021 advisory. - Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an...
Microsoft Power Apps < 3.26085.3.0 Remote Code Execution (October 2026)
The Windows 'Microsoft Power Apps' app installed on the remote host is prior to version 3.26085.3.0. It is, therefore, affected by a remote code execution vulnerability: - Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network. CVE-2026-70213...
Linux Distros Unpatched Vulnerability : CVE-2026-62322
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an authorization code without validating the...
Zoom Workplace VDI Client 7.0.11 < 7.0.13 Improper Certificate Validation (ZSB-26021)
The version of Zoom Workplace VDI Client installed on the remote host is prior to 7.0.13. It is, therefore, affected by a vulnerability as referenced in the ZSB-26021 advisory. - Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an...
CVE-2026-16754
The Lenovo Smart Camera C33 , distributed exclusively in the Chinese market, is susceptible to an improper certificate validation vulnerability (CWE-295). This flaw could allow an adjacent user to intercept or manipulate network communications. No specific root cause components, exploit details, ...
CVE-2026-16754
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications...
CVE-2026-96222
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...
CVE-2026-111323
RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validateurl checks only the initial hostname. Attackers can submit a public URL that redirects or DNS-rebinds to internal addresses like cloud metadata...
CVE-2026-110916
Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
Improper Certificate Validation
Overview undici is an An HTTP/1.1 client, written from scratch for Node.js Affected versions of this package are vulnerable to Improper Certificate Validation via the Agent constructor in lib/dispatcher/agent.js, where TLS options passed as the tls parameter are silently dropped and never stored ...