176477 matches found
EUVD-2026-98164
Frappe Framework before 15.117.0 and 16.x before 16.30.0 contains an arbitrary file read vulnerability in the handling of attributes in outgoing email HTML. Attackers who can supply outgoing email content can set an attribute value referencing a local file path to expose sensitive server files...
EUVD-2026-98002
Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in several endpoints that lack input validation. Any authenticated user, including one with no assigned roles, can send specially crafted requests to read other users' sensitive information and escalate...
EUVD-2026-98157
Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's import fallback. Attackers can ship stylesheets with relative, absolute, or symlinked @import or @use targets to...
CVE-2020-17519
Vulnerable Application This module exploits an unauthenticated directory traversal vulnerability in Apache Flink version 1.11.0 and released in 1.11.1 and 1.11.2 as well, allowing arbitrary file read with the web server privileges Vulnerable version: flink-1.11.0-src.tgz, Verification Steps 1...
CVE-2026-81858
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server...
Dirty-Pipe-CVE-2022-0847-POCs
Dirty-Pipe-CVE-2022-0847-POCs Author: Max Kellermann [email protected] Contributor: Bl4sty https://twitter.com/bl4sty A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits. Today, security researcher Max Kellermann...
PT-2026-113261
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113133
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...
PT-2026-112610
Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network...
PT-2026-112721
Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description An out-of-bounds read in the Windows Device Association Service allows an authorized attacker to disclose information over a network. An out-of-bounds read occurs...
PT-2026-113266
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-112724
Name of the Vulnerable Software and Affected Versions Windows Message Queuing Queue Manager affected versions not specified Description An out-of-bounds read in the Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. An out-of-bounds read...
PT-2026-113247
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
UBUNTU-CVE-2026-107614
An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...
Microsoft Windows: CVE-2026-83703: Windows Wi-Fi Driver Denial of Service Vulnerability
Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network...
Microsoft Windows: CVE-2026-84007: Remote Desktop Gateway Service Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-83647: Windows Active Directory Domain Services Denial of Service Vulnerability
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-83655: Network Policy Server (NPS) Denial of Service Vulnerability
Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-83635: Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-85797: Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network...