Base de CVEs

CVE-2026-0515 Média · 6.2 CWE-233 14/07/2026

Insufficient parameter validation in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety

Insufficient Parameter Validation in the SchedGet() system call could allow an attacker with local access to cause a crash of the QNX Neutrino kernel.

CVE-2026-32998 Crítica · 9.4 CWE-233 28/05/2026

This vulnerability in Veeam Service Provider Console allows for remote code execution.

CVE-2026-33585 Baixa · 3.8 CWE-233 13/05/2026

Arqit SKA-Platform Improper Handling of Parameters Vulnerability

Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03.

CVE-2018-25233 Média · 5.5 CWE-233 30/03/2026

WebDrive 18.00.5057 Denial of Service via Secure WebDAV

WebDrive 18.00.5057 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the username field during Secure WebDAV connection setup. Attackers can input a buffer-overflow payload of 5000 bytes in the username parameter and trigger a connection test to cause the application to crash.

CVE-2026-2370 Alta · 8.8 CWE-233 29/03/2026

Improper Handling of Parameters in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.3 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 affecting Jira Connect installations that could have allowed an authenticated user with minimal workspace permissions to obtain installation credentials and impersonate the GitLab app due to improper authorization checks.

CVE-2023-20514 Alta · 8.7 CWE-233 11/02/2026

Improper handling of parameters in the AMD Secure Processor (ASP) could allow a…

Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment resulting in arbitrary code execution

CVE-2026-22626 Média · 4.9 CWE-233 30/01/2026

Due to insufficient input parameter validation on the interface, authenticated users of…

Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by crafting specific messages.

CVE-2025-55080 Alta · 7.1 CWE-233 15/10/2025

Improper Parameter Check in ThreadX Syscall Implementation

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write.

CVE-2025-55078 Média · 5.5 CWE-233 14/10/2025

Incomplete validation of kernel object pointers in system calls

In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a reserved or unmapped memory region. Vulnerable system calls had a check of pointers, but that check wasn't verifying whether the pointer is outside the module memory region.