70581 matches found
CVE-2026-77816
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks. An attacker could exploit this vulnerability to obtain sensitive information...
CVE-2026-77816 IBM WebSphere Application Server Liberty Improper Certificate Validation
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks. An attacker could exploit this vulnerability to obtain sensitive information...
CVE-2026-77816
The IBM WebSphere Application Server - Liberty administrative client (versions 17.0.0.3 through 26.0.0.9 ) is vulnerable to a man-in-the-middle attack due to Improper Certificate Validation (CWE-295). An attacker could exploit this flaw to obtain sensitive information. This vulnerability also aff...
CVE-2026-63157 Omnispace Agora Project < 26.10.0 Stored XSS via Links Module
Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts by submitting an unsanitized link address adress field that is echoed into an onclick event-handler attribute without neutralizing quotes...
CVE-2026-97789
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-96948
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...
CVE-2026-96912
Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally...
DEBIAN-CVE-2026-85747
Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.manifests.Get reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a...
CVE-2026-85747
Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.manifests.Get reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a...
CVE-2026-85337
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...
CVE-2026-84011
Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally...
CVE-2026-83789
Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-83699
Stack-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83698
Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83688
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-83580
Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70250
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-70149
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...