208057 matches found
CVE-2026-105900 ColdFusion | Improper Input Validation (CWE-20)
ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction...
CVE-2026-106626
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not...
CVE-2026-105895
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require use...
CVE-2026-77816
The IBM WebSphere Application Server - Liberty administrative client (versions 17.0.0.3 through 26.0.0.9 ) is vulnerable to a man-in-the-middle attack due to Improper Certificate Validation (CWE-295). An attacker could exploit this flaw to obtain sensitive information. This vulnerability also aff...
CVE-2026-77816 IBM WebSphere Application Server Liberty Improper Certificate Validation
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks. An attacker could exploit this vulnerability to obtain sensitive information...
CVE-2026-107369
The auth0/nextjs-auth0 SDK contains an open redirect vulnerability due to improper validation of the returnTo parameter. While the SDK initially validates that the parameter is a same-origin URL, the subsequent reconstruction logic can produce a URL that browsers interpret as an absolute or schem...
CVE-2026-78628 Improper Input Validation in the Okta Credential Provider for Windows
The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate...
CVE-2026-78628
The Okta Credential Provider for Windows contains an improper input validation vulnerability. The software fails to validate the buffer size and packed string offsets of a serialized credential buffer before interpreting it as a Kerberos logon structure . Processing a malformed buffer can cause t...
GHSA-FQPQ-CX42-9JMM Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Security. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. .NET 11 post-handshake TLS client...
CVE-2026-106626
Adobe Experience Manager is affected by an Improper Input Validation vulnerability (CWE-20) that could allow an attacker with high privileges to achieve arbitrary code execution in the context of the current user. This vulnerability does not require user interaction and has a CRITICAL severity ra...
CVE-2026-106626 Adobe Experience Manager | Improper Input Validation (CWE-20)
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not...
CVE-2026-105895 Adobe Experience Manager | Improper Input Validation (CWE-20)
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require use...
CVE-2026-105895
Adobe Experience Manager is affected by an Improper Input Validation vulnerability (CWE-20). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user, potentially leading to elevated privileges or control over the victim's account or session. Ex...
CVE-2026-96234
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-96238
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-96222
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-95630
Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user...
CVE-2026-95631
Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...
CVE-2026-92464
Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...