CVE-2026-91881

Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized...

EUVD-2026-101426

A Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated IS-IS peer to cause a denial of service...

Samsung Open Source Vyond: Input validation error vulnerability

Samsung Open Source Vyond has a vulnerability related to input validation. This vulnerability stems from improper array index validation, which may lead to tampering with input data...

SimplePie input validation vulnerability

SimplePie versions 1.9.0 and earlier have a vulnerability related to input validation errors. This vulnerability arises from improper handling of file:// URLs in redirection or auto-discovery links, allowing filegetcontents to read files accessible to the web server process, potentially leading t...

WordPress Email Customizer for WooCommerce has a vulnerability related to input validation errors.

The WordPress Email Customizer for WooCommerce version 3.9.5 and earlier has a vulnerability in input validation. This vulnerability stems from insufficient authorization and input cleansing in the sendtestmail function. It allows user-controlled PHP code to be written into executable files in th...

WordPress Link Whisper – Free Cross-Site Script Vulnerabilities

WordPress Link Whisper Free 0.9.7 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper input validation during web page generation, making them susceptible to reflection-type cross-site scripting attacks...

Mat Trudel Bandit has a vulnerability in input validation.

In versions prior to 1.13.0 of Mat Trudel Bandit, version 0.6.0, there was an input validation vulnerability. This vulnerability stemmed from the lack of validation for the authority in HTTP/1 requests. As a result, unauthenticated remote attackers could set conn.host and conn.port to values that...

Microsoft Office Word input validation error vulnerability

Microsoft Office Word has a vulnerability related to input validation. This vulnerability stems from relying on untrusted inputs in security decisions, which may allow unauthorized attackers to bypass security features locally...

EnergizeLab station-middleware: Input validation error vulnerability

The EnergizeLab station-middleware versions 1.6.5 to 1.8.2 have a vulnerability related to input validation errors. This vulnerability stems from external control over file paths, allowing any registered low-privilege account to access any file on the server by using a file path controlled by the...

HPE NonStop SOAP input validation error vulnerability

HPE NonStop SOAP 4.0 T0865L01^ACN and earlier versions contain an input validation error vulnerability caused by memory corruption, which may lead to system crashes...

Google Chrome: Input validation error vulnerability

Versions of Google Chrome prior to 155.0.8059.84 contain a vulnerability related to input validation. This vulnerability arises from improper input validation, and it could allow remote attackers to execute arbitrary code outside of the sandbox through a specially crafted HTML page...

HPE NonStop SQL/MX Runtime Statistics Input Validation Error Vulnerability

HPE NonStop SQL/MX Run-Time Statistics T1117L40 and earlier versions contain an input validation error vulnerability. This vulnerability stems from memory corruption and null pointer dereferencing, potentially leading to process crashes, denial of service, or information leakage...

HPE Nonstop KMS Server input validation error vulnerability

The HPE Nonstop KMS Server T1190L40 version contains an input validation error vulnerability caused by a buffer overflow when processing specially crafted input messages...

Eclipse Jetty input validation error vulnerability

Security vulnerabilities exist in Eclipse Jetty versions 12.1.11 and earlier within the 12.1.x series, as well as versions 12.0.38 and earlier within the 12.0.x series. Additionally, vulnerabilities are present in Eclipse Jetty jetty-proxy versions 11.0.32 and earlier within the 11.0.x series,...

OpenNext for Cloudflare: Input validation error vulnerability

OpenNext for Cloudflare versions 0.3.0 to 1.20.2 have a security vulnerability. This vulnerability arises when enabling enableCacheInterception and relying on middleware for access control. The handling of encoded path names is inconsistent between middleware matching and cache lookup...

WordPress Booking and Rental Manager has a vulnerability in input validation.

WordPress Booking and Rental Manager 2.8.0 and earlier versions have a vulnerability related to input validation errors. This vulnerability stems from improper validation of the specified number in the input, which may lead to the removal of important client functions...

HPE NonStop SQL/MX SQLCAT input validation error vulnerability

HPE NonStop SQL/MX SQLCAT T1055L40 and earlier versions contain an input validation error vulnerability. This vulnerability stems from improper input validation and may allow unauthenticated users to execute unauthorized commands...

Vulnerability in Eclipse Adoptium.net software supply chain

There is a security vulnerability in Eclipse Adoptium.net. It stems from improper validation of URL prefixes in the link parameter and inadequate handling of dot normalization. This may allow attackers to bypass checks, redirect users to a repository controlled by them, and download malicious...

Vulnerability related to encryption issues in Apache Airflow SSH provider

Versions prior to 7.0.0 of the Apache Airflow SSH provider and versions prior to 7.0.0 of the Apache Airflow SFTP provider contain an encryption vulnerability. This vulnerability arises because SSH host key validation is disabled by default; when no hostkey is configured or nohostkeycheck is...

CVE-2026-86561

A flaw exists in DPDK lib/vhost where memory size is not adequately validated before the mmap operation during vhost memory-region setup. This vulnerability, categorized under CWE-770 , can lead to memory corruption or a host crash . No mitigation is currently available. No information regarding ...