In ScreenConnect™ versions prior to 26.2, input
validation within the Host Pass creation functionality could allow an
authenticated user with Host Pass creation privileges the ability to specify a
token expiration duration beyond the intended maximum when generating delegated
access tokens.
libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfs_zdr_string in lib/libnfs-zdr.c.
Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted.
This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor notification responses. The bug can be triggered by an unprivileged local user and could result in handling of crafted responses.
Kysely versions from 0.26.0 up to 0.28.16 contain a path traversal vulnerability in the DefaultQueryCompiler.visitJSONPathLeg function. This flaw allows attacker-controlled input to manipulate JSON-path metacharacters, enabling traversal beyond intended JSON keys. Consequently, attackers can read and, in update statements, write to JSON sub-fields outside the developer's intended scope across MySQL, PostgreSQL, and SQLite databases. The vulnerability is fixed in version 0.28.
IBM Cloud APM, Base Private 8.1.4 and IBM Cloud APM, Advanced Private 8.1.4 IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in the data query logic of the Fenced environment.
CVE-2026-42744 is a vulnerability in the Ads by WPQuads plugin (up to version 3.0.2) involving improper validation of specified quantity in input fields. This flaw allows manipulation of hidden fields, potentially leading to integrity issues. The vulnerability has a medium severity rating with a CVSS score of 6.5.
CVE-2026-8047 is a high-severity vulnerability in CODESYS Control RTE (SL) version 3.5.21.0. It involves improper length checking when parsing incoming HTTP requests, leading to a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service by crashing the affected device.
Ledger Nano X, Flex, and Stax devices contain a denial of service vulnerability in the MCU firmware update process due to missing validation of the reset_handler parameter during firmware flashing. An attacker can provide a crafted reset_handler address pointing to invalid memory or attacker-controlled code to cause the device to enter an unrecoverable fault state during boot, resulting in permanent loss of operability.
This affects versions of the package exifreader before 4.39.0. A crafted image containing an ICC mluc tag can set an attacker-controlled record count together with a zero record size. During parsing, ExifReader repeatedly processes the same record and appends entries to an array without sufficient bounds validation, causing excessive memory growth. In applications that parse attacker-supplied images, this may lead to denial of service through memory exhaustion.
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.2, Vvveb CMS does not validate the sign of the quantity parameter on the cart-add endpoint. Submitting a negative integer is accepted by the server and treated as a normal positive line-item, but with the sign carried through into every downstream computation: line total, sub-total, taxes, and grand total all become negative numbers. The customer-facing cart UI then displays a negative grand total to the user, the checkout flow accepts the negative cart, and the resulting order is persisted in the merchant's database with a negative total column. From the merchant's order management dashboard, this surfaces as a real order with a negative total — an "the merchant owes the customer money" record that no legitimate workflow ever creates. This vulnerability is fixed in 1.0.8.2.
CVE-2025-66660 is a low-severity vulnerability in AMD Radeon RX 6000 Series graphics products involving insufficient parameter sanitization in the TEE SOC Driver. An attacker with high privileges could send a malformed command (DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT) that causes incorrect shared memory mapping, potentially leading to unexpected behavior. There is no confirmed patch or official remediation available at this time, and no known exploits have been reported in the wild.
CVE-2026-0428 is a low-severity vulnerability in the AMD Instinct™ MI300A related to improper validation of input parameters in the TEE SOC Driver. Specifically, insufficient sanitization of a command (DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REG) allows an attacker with high privileges to write invalid data to a remote Die, which may cause unexpected behavior. The vulnerability has a CVSS 4.0 base score of 1.8, indicating low impact and complexity. There is no vendor-provided patch or official remediation guidance available at this time, and no known exploits in the wild have been reported. The affected product is not a cloud service, so remediation depends on AMD's release of a fix. No geographic targeting is indicated.
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, improper validation of the JWT NumericDate claims exp, nbf, and iat in hono/utils/jwt allows tokens with non-spec-compliant claim values to silently bypass time-based checks. This issue is not exploitable by an anonymous attacker; it only manifests when a malformed claim value reaches verify() — typically when the application itself issues such tokens, or when the signing key is otherwise under attacker control. This vulnerability is fixed in 4.12.18.
Conditional Fields for Contact Form 7 WordPress plugin through version 2.7.2 contains an uncontrolled resource consumption vulnerability in the Wpcf7cfMailParser class where the hide_hidden_mail_fields_regex_callback() method reads an iteration count directly from user-supplied POST parameters without validation or upper bound enforcement. Unauthenticated attackers can supply an arbitrarily large integer value through the REST API endpoint to cause unbounded loop execution with multiple preg_replace() operations, exhausting server memory and crashing the PHP process.
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic when certain configurations exist.
An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.
CVE-2026-1352 is a medium severity vulnerability in IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.4 on Linux, UNIX, and Windows. It involves improper validation of specified quantity in input, which can allow an authenticated user to cause a denial of service by exploiting improper neutralization of special elements in data query logic.
CVE-2026-33471 is a critical vulnerability in the nimiq-block Rust implementation prior to version 1.3.0. It involves improper input validation in the SkipBlockProof::verify function, where out-of-range signer indices can be exploited to bypass quorum checks. This allows a malicious validator with fewer than the required number of signer slots to pass verification by manipulating signature aggregation. The vulnerability has a CVSS score of 9.6, indicating high impact on integrity and availability. A patch fixing this issue was included in version 1.3.0.