CWE-20

n8n is an open source workflow automation platform. From version 0.187.0 to before 1.120.3, a command injection vulnerab

The rtsol(8) and rtsold(8) programs do not validate the domain search list options provided in router advertisement mess

A buffer overflow vulnerability exists in the ONVIF GetStreamUri function of LSC Indoor Camera V7.6.32. The application

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 r

Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability. A high privi

mailcow: dockerized is an open source groupware/email suite based on docker. Versions prior to 2026-03b have a second-or

An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authentic

FacturaScripts is an open source accounting and invoicing software. Versions 2026 and below contain a critical vulnerabi

An authenticated command injection vulnerability exists in the Archer BE450 v1 and BE7200 v1 router that allows an admin

The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local

The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SVGFi

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability. A hig

In Progress ShareFile Storage Zones Controller versions <= 5.12.5 and <= 6.0.2, an authenticated zone administrator can

An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400,

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio

The "create core" API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters, which

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In v

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In v

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Vers

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Vers

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Vers

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Vers

PolarLearn is a free and open-source learning program. Prior to version 0-PRERELEASE-15, the vote API route (`POST /api/

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. In versions 1.1.

ormar is a async mini ORM for Python. Versions 0.23.0 and below are vulnerable to Pydantic validation bypass through the

Bugsink is a self-hosted error tracking tool. In 2.1.0, an authenticated file write vulnerability was identified in Bugs

PromptHub is an all-in-one AI toolbox for prompt, skill, and agent management. From version 0.4.9 to before version 0.5.

NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A s

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descripti

Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, several ESP-TEE secu

bt_sdp_parse_attribute() in subsys/bluetooth/host/classic/sdp.c validated only that the SDP record buffer held the type-

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.

ncnn is a high-performance neural network inference framework optimized for the mobile platform. In commit e54f7b1f88434

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macO

Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remot

Insufficient validation of untrusted input in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authentic

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authentic

WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails

Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduc

GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attac

An insecure authentication mechanism in the safe_exec.sh startup script of Blurams Flare Camera version 24.1114.151.929

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-Run