134183 matches found
CVE-2026-45591
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network...
PT-2026-47952
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
PT-2026-47869
Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Improper input validation allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that...
PT-2026-47954
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network. Cross-si...
VulnCheck KEV: CVE-2026-34910
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection...
PT-2026-47973
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a condition where malicious scripts are injected into trusted websites...
PT-2026-47977
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Improper control of code generation allows an unauthorized remote attacker to execute arbitrary code over a network, potentially affecting the system. This is a code injecti...
PT-2026-48025
Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description An integer overflow or wraparound exists in the Windows HTTP Protocol Stack kernel-mode driver HTTP.sys. The issue occurs during the dynamic expansion of the buffer array in the UL...
PT-2026-47894
Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description An incorrect calculation of buffer size in the TCP/IP stack allows an authorized attacker to cause a denial-of-service condition over an adjacent network. Recommendations At the moment...
VulnCheck KEV: CVE-2026-34908
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system...
PT-2026-47822
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Insufficient configuration management allows authenticated administrators connected to the local network to tamper with the system. Recommendations At the moment...
PT-2026-47922
Use after free in Windows Network Controller NC Host Agent allows an authorized attacker to deny service locally...
PT-2026-47937
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information over a network, which may subsequently affect the system. An out-of-bounds read occurs...
PT-2026-48101
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network. Cross-si...
NETGEAR多款产品 输入验证错误漏洞
NETGEAR Rax35 and other wireless routers are products of NETGEAR Corporation. Several NETGEAR products have a vulnerability related to input validation. This vulnerability stems from insufficient input validation, which may allow administrators who are connected to the local network to tamper wit...
NETGEAR JR6150 输入验证错误漏洞
NETGEAR JR6150 is a wireless router produced by NETGEAR Corporation. The NETGEAR JR6150 has a vulnerability related to input validation. This vulnerability stems from insufficient input validation, which may allow administrators connected to the local network to make unauthorized modifications to...
CVE-2026-46321
In the Linux kernel, the following vulnerability has been resolved: tun: free page on short-frame rejection in tunxdpone tunxdpone returns -EINVAL on a frame shorter than ETHHLEN without freeing the page that vhostnetbuildxdp allocated for it. tunsendmsg discards that -EINVAL and still returns...
NETGEAR多款产品 安全漏洞
NETGEAR Rax35 and other wireless routers are products of NETGEAR Corporation. Several NETGEAR products have security vulnerabilities, which stem from inadequate configuration management. This vulnerability could allow administrators who are connected to the local network to tamper with the system...
PT-2026-47941
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An improper limitation of a pathname to a restricted directory, known as path traversal, allows an authorized attacker to execute arbitrary code over a network...
PT-2026-47942
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information over a network, which may subsequently affect the system. An out-of-bounds read occurs...