374235 matches found
PT-2026-111557
Name of the Vulnerable Software and Affected Versions Froxlor versions 0.10.0 through 2.3.13 Description Missing authorization allows reseller accounts to access MySQL server and cronjob configurations intended only for full administrators. This is achieved by using API read commands through the...
PT-2026-113260
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113447
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than i...
CVE-2026-88129: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network...
CVE-2026-107612
Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process. The named shared memory segment in the Global...
CVE-2026-83722: Use After Free
Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
CVE-2026-97840: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97841: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97837: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97842: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97824: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-107614
An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...
Microsoft Windows: CVE-2026-83771: Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network...
CVE-2026-110100: Missing Authorization
Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import that allows any authenticated user to import days off into any contract from an arbitrary URL. Attackers can submit a contract id and URL via POST to overwrite non-working-day calendars and abuse getheaders an...
CVE-2026-97819: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-87710: Concurrent Execution using Shared Resource with Improper Synchronization
Improper access control in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
CVE-2026-97823: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-69830: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DHCP Server allows an unauthorized attacker to execute code over a network...