374077 matches found
CVE-2026-83691: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally...
PT-2026-113024
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in the DNS Server allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer...
PT-2026-111131
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP affected versions not specified Description Applications based on SAP GUI for HTML do not sufficiently sanitize user-supplied content in certain functionality. This allows an authenticated attacker to send...
CVE-2026-102603: Unverified Password Change
Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the password change endpoint POST /current/user/password accepts a valid client token without requiring the account's current password or another elevated authentication step. An attack...
PT-2026-111549
Name of the Vulnerable Software and Affected Versions Parse Server versions 5.4.0 through 8.6.95 Parse Server versions 9.0.0 through 9.10.2-alpha.4 Description Transactional batch state is shared across concurrent requests, allowing a transactional batch request from one client to interfere with...
Microsoft Windows: CVE-2026-85841: Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network...
KLA91343 Multiple vulnerabilities in Microsoft Server Software
Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, perform cross-site scripting attack, spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in...
PT-2026-112339
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Server-side request forgery SSRF allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where a server is tricked into making requests to an...
PT-2026-112935
Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An out-of-bounds read occurs in the DNS Server, which allows an authorized attacker to cause a denial of service over a network. An out-of-bounds read is a condition where the software rea...
PT-2026-113434
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about a newer version that...
PT-2026-113249
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113259
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-111389
Name of the Vulnerable Software and Affected Versions Industrial Edge App Publisher versions prior to V1.27.9 Description The software fails to properly validate the server certificate during the initiation of a TLS connection. This flaw enables a Man-in-the-Middle attack, where an attacker can...
CVE-2026-88089: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...
PT-2026-112943
Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An out-of-bounds read occurs in the DNS Server, which allows an authorized attacker to cause a denial-of-service condition over a network. This issue enables attackers to negatively affect...
CVE-2026-103560: Missing Authorization
Improper authorization in DNS Server allows an authorized attacker to perform tampering locally...
CVE-2026-103572: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...
CVE-2026-83945: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...