CWE-20

Concrete CMS versions 9.0.0 through 9.3.9 are affected by a stored XSS in Folder Function.The "Add Folder" functionality

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided d

Concrete CMS 9 to 9.4.2 and versions below 8.5.21 are vulnerable to Reflected Cross-Site Scripting (XSS) in the Conversa

Concrete CMS versions 9 through 9.4.2 are vulnerable to Stored XSS from Home Folder on Members Dashboard page.  Version

Improper Input Validation vulnerability in Hallo Welt! GmbH BlueSpice (Extension:CognitiveProcessDesigner) allows Cross-

A vulnerability has been found in y_project RuoYi up to 4.8.0 and classified as critical. This vulnerability affects the

A vulnerability, which was classified as problematic, has been found in westboy CicadasCMS 1.0. This issue affects some

A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unk

A vulnerability was found in LinZhaoguan pb-cms 1.0.0 and classified as critical. This issue affects some unknown proces

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue

Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a st

Improper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applicat

CWE-20 Improper Input Validation

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may creat

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. Starting in version 3.3.8, a security c

Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successfu

Improper input validation in firmware of some Solidigm DC Products may allow an attacker with local access to cause a De

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause a denial of

Improper input validation for some Intel VTune Profiler before version 2025.1 within Ring 3: User Applications may allow

In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.10

A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7. Affected by this issue is so

BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request.

Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A low privileged attacker with re

A vulnerability was found in zhangyanbo2007 youkefu up to 4.2.0 and classified as problematic. Affected by this issue is

iTop is an web based IT Service Management tool. In version 3.2.0, an attacker may send a URL to the server to trigger a

Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to

Frappe Learning is a learning system that helps users structure their content. In versions 2.33.0 and below, the image u

HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability. The image upload func

Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to bef

OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tamp

Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to

TS3 Manager is modern web interface for maintaining Teamspeak3 servers. A reflected cross-site scripting vulnerability h

The Advanced Database Cleaner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, an

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18

Open Forms allows users create and publish smart forms. Prior to versions 3.2.7 and 3.3.3, forms where the prefill data

In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and versions below 3.9.10, 3.8.58 and 3.7.28 of th

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.1), RUGGEDCOM RS416Pv2 V5.X (All ver

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior versi

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages

Improper input validation in the UEFI firmware GenerationSetup module for the Intel(R) Server D50DNP and M50FCP boards m

A vulnerability was found in Monitorr up to 1.7.6m. It has been classified as problematic. This affects an unknown part

An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier a

Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service.

Improper input validation in the Intel Edger8r Tool for some Intel(R) SGX SDK may allow an authenticated user to potenti

GoCD is a continuous deliver server. GoCD versions 18.9.0 through 24.4.0 (inclusive) can allow GoCD admins to abuse the

A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the perm

Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applic

go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.3, go-redi