173871 matches found
VulnCheck KEV: CVE-2025-52907
Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.1360B20241207...
PT-2026-76831
A reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. An attacker in a privileged network position may be able to cause a denial-of-service...
The vulnerability of the fs/minix/inode.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the fs/minix/inode.c component in the Linux operating system is related to insufficient checking of the type of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to improper validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the Apache Tomcat application server, related to insufficient input validation, allows attackers to execute arbitrary code.
The vulnerability of the Apache Tomcat application server is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Oracle Linux 10 : gstreamer1-plugins-bad-free (ELSA-2026-55433)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-55433 advisory. - Fix ADPCM decoder input validation CVE-2026-19387 Resolves: RHEL-235500 - Fix rfbsrc hextile and color read handling for non-32bpp pixel formats...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099465)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099465 advisory. Improper validation of type oidvector in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that...
PT-2026-76876
Name of the Vulnerable Software and Affected Versions Mattermost versions 11.7.0 through 11.7.6 Mattermost versions 10.11.0 through 10.11.21 Mattermost versions 11.8.0 through 11.8.3 Description Insufficient server-side validation of BoardMember.Scheme fields during insert and archive-import...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099502)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099502 advisory. Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operati...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: mozjs78 (UTSA-2024-003380)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003380 advisory. xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context...
PT-2026-76841
The issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100567)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100567 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd Two latent bugs in...
Important: bind9.18 security update
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
The vulnerability in the `drivers/net/usb/pegasus.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/net/usb/pegasus.c component of the Linux operating system is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the nft_set_rbtree.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the nftsetrbtree.c component in the Linux operating system is related to incorrect checks for consistency in input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-76676
A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetch url/fetch urls of the file /latest/meta-data/iam/security-credentials/ of the component URL Validation. Such manipulation leads to server-side request forgery. It is possible to launch the attack...
PT-2026-73267
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...
Unity Linux 20.1070e Security Update: gvfs (UTSA-2026-099541)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099541 advisory. A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing...
Important: unbound security update
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes CVE-2026-44690 For more details about the security issues, including the impact, a CVSS...
