375251 matches found
CVE-2026-110100: Missing Authorization
Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import that allows any authenticated user to import days off into any contract from an arbitrary URL. Attackers can submit a contract id and URL via POST to overwrite non-working-day calendars and abuse getheaders an...
PT-2026-113393
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.10 Description An authentication bypass flaw exists when the samlWeb-2.0 feature is enabled. This issue allows unauthenticated remote attackers to bypass enterprise...
PT-2026-112332
Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system. Recommendations At the moment, there is no...
CVE-2026-70244: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network...
PT-2026-112339
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Server-side request forgery SSRF allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where a server is tricked into making requests to an...
CVE-2026-70083: Incorrect Authorization
Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally...
CVE-2026-70167: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in DNS Server allows an authorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-70167: Windows Domain Name Service Remote Code Execution Vulnerability
Access of resource using incompatible type 'type confusion' in DNS Server allows an authorized attacker to execute code over a network...
CVE-2026-70087: Incorrect Authorization
Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally...
Microsoft Windows: CVE-2026-70087: Role: DNS Server Security Feature Bypass Vulnerability
Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally...
CVE-2026-70085: Missing Authorization
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...
Microsoft Windows: CVE-2026-70085: Role: DNS Server Tampering Vulnerability
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...
CVE-2026-70071: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally...
CVE-2026-70127: Use After Free
Use after free in DNS Server allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-70127: Windows Domain Name Service Remote Code Execution Vulnerability
Use after free in DNS Server allows an unauthorized attacker to execute code over a network...
PT-2026-112404
Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no...
PT-2026-113444
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about a newer version that...
PT-2026-113442
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A use-after-free condition exists that allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue where an application continues to use a...