167698 matches found
EUVD-2026-58074
In Zimbra Collaboration ZCS before 10.1.17, a Cross-Site Request Forgery CSRF vulnerability exists in the Exchange Web Services EWS endpoint of Zimbra Collaboration ZCS due to insufficient validation of request content types. An attacker can exploit this vulnerability by causing an authenticated...
CVE-2026-6387
A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-12036
An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges...
CVE-2026-73559
CVE-2026-73559 affects vLLM (0.19.0–0.26.0) where the /v1/completions prompt field can be an unbounded list, and prompt_to_seq/remove expansion in preprocessing may spawn unbounded expansion and create one engine generator/response slot per prompt. This can exhaust CPU, memory, async scheduling c...
CVE-2026-63423
During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-63424
During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges...
CVE-2026-6387
A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-6387
A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-6387
A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges...
EUVD-2026-58055
A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-6387
Technical details for CVE-2026-6387 are not publicly available in the provided documents. Monitor Lenovo notices and NVD for updates on affected products, impacted components, root cause, and remediation.
CVE-2026-49820
Probo (go.probo.inc/probo) carries a path normalization bug in its saferedirect redirect validator. Before patch 0.193.1, the validator only inspected the second character of relative paths, allowing crafted URLs like /../\evil.com to pass validation; Go's http.Redirect then normalizes the path t...
CVE-2026-66658
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
CVE-2026-66465
Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...
CVE-2026-66453
Unauthenticated Broken Authentication in Salon booking system = 10.30.26 versions...
CVE-2026-28185
Unauthenticated Broken Authentication in Log in with Google = 1.4.2 versions...
CVE-2026-28008
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...
CVE-2026-28148
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...