EnergizeLab station-middleware: Input validation error vulnerability

The EnergizeLab station-middleware versions 1.6.5 to 1.8.2 have a vulnerability related to input validation errors. This vulnerability stems from external control over file paths, allowing any registered low-privilege account to access any file on the server by using a file path controlled by the...

HPE NonStop SOAP input validation error vulnerability

HPE NonStop SOAP 4.0 T0865L01^ACN and earlier versions contain an input validation error vulnerability caused by memory corruption, which may lead to system crashes...

HPE NonStop SQL/MX Runtime Statistics Input Validation Error Vulnerability

HPE NonStop SQL/MX Run-Time Statistics T1117L40 and earlier versions contain an input validation error vulnerability. This vulnerability stems from memory corruption and null pointer dereferencing, potentially leading to process crashes, denial of service, or information leakage...

Eclipse Jetty input validation error vulnerability

Security vulnerabilities exist in Eclipse Jetty versions 12.1.11 and earlier within the 12.1.x series, as well as versions 12.0.38 and earlier within the 12.0.x series. Additionally, vulnerabilities are present in Eclipse Jetty jetty-proxy versions 11.0.32 and earlier within the 11.0.x series,...

OpenNext for Cloudflare: Input validation error vulnerability

OpenNext for Cloudflare versions 0.3.0 to 1.20.2 have a security vulnerability. This vulnerability arises when enabling enableCacheInterception and relying on middleware for access control. The handling of encoded path names is inconsistent between middleware matching and cache lookup...

HPE Nonstop KMS Server input validation error vulnerability

The HPE Nonstop KMS Server T1190L40 version contains an input validation error vulnerability caused by a buffer overflow when processing specially crafted input messages...

WordPress Booking and Rental Manager has a vulnerability in input validation.

WordPress Booking and Rental Manager 2.8.0 and earlier versions have a vulnerability related to input validation errors. This vulnerability stems from improper validation of the specified number in the input, which may lead to the removal of important client functions...

Vulnerability in Eclipse Adoptium.net software supply chain

There is a security vulnerability in Eclipse Adoptium.net. It stems from improper validation of URL prefixes in the link parameter and inadequate handling of dot normalization. This may allow attackers to bypass checks, redirect users to a repository controlled by them, and download malicious...

Vulnerability related to encryption issues in Apache Airflow SSH provider

Versions prior to 7.0.0 of the Apache Airflow SSH provider and versions prior to 7.0.0 of the Apache Airflow SFTP provider contain an encryption vulnerability. This vulnerability arises because SSH host key validation is disabled by default; when no hostkey is configured or nohostkeycheck is...

Google Chrome: Input validation error vulnerability

Versions of Google Chrome prior to 155.0.8059.84 contain a vulnerability related to input validation. This vulnerability arises from improper input validation, and it could allow remote attackers to execute arbitrary code outside of the sandbox through a specially crafted HTML page...

CVE-2026-86561

A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption...

CVE-2026-86561

A flaw exists in DPDK lib/vhost where memory size is not adequately validated before the mmap operation during vhost memory-region setup. This vulnerability, categorized under CWE-770 , can lead to memory corruption or a host crash . No mitigation is currently available. No information regarding ...

AZL-108452 CVE-2026-101019 affecting package nginx for versions less than 1.30.6-1

Description NGINX JavaScript njs has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built-in njs and QuickJS backends during the canonicalization process, the $attr$Name getter may return undefined for an...

CVE-2026-101019

Description NGINX JavaScript njs has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built-in njs and QuickJS backends during the canonicalization process, the $attr$Name getter may return undefined for an...

CVE-2026-89077 MOVEit Transfer Identity validation flaw in SFTP authentication

Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer SFTP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89077 MOVEit Transfer Identity validation flaw in SFTP authentication

Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer SFTP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-71889

A flaw was found in Bouncy Castle. The certificate path reviewer PKIXCertPathReviewer fails to enforce name constraints on the end-entity certificate during validation. A remote attacker can exploit this issue by presenting a certificate that violates domain restrictions imposed by an issuing...

CVE-2026-91881

The Dell Terraform Provider for Redfish contains a Critical Improper Certificate Validation vulnerability (CWE-295) in its HTTP transport component (versions prior to 1.6.2 ). The root cause is that TLS certificate verification is unconditionally disabled in the base HTTP transport. This allows a...

CVE-2026-91881

Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized...

EUVD-2026-101152

Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized...