292091 matches found
PT-2026-112614
Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description An untrusted pointer dereference in the Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...
PT-2026-111294
Name of the Vulnerable Software and Affected Versions SourceCodester Library Management System version 1.0 Description A security flaw allows remote attackers to perform unrestricted file uploads. This occurs through the manipulation of the image argument within the move uploaded file function...
PT-2026-113148
Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A use-after-free condition in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges...
PT-2026-112787
Name of the Vulnerable Software and Affected Versions Windows exFAT File System affected versions not specified Description A heap-based buffer overflow occurs in the Windows exFAT File System. This issue allows an authorized attacker to elevate privileges locally, potentially granting them...
CVE-2026-109115: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects some unknown processing of the file User/forgot3.php of the component Password Reset. Performing a manipulation of the argument email/password results in sql...
CVE-2026-96930: Out-of-bounds Read
Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-96938: Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...
CVE-2026-83759: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...
CVE-2026-108975: Unrestricted Upload of File with Dangerous Type
A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function moveuploadedfile of the file admin/addadmin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The...
CVE-2026-108969: Incorrect Comparison
A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...
CVE-2026-108967: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/editcredit.php. The manipulation of the argument credit results in sql injection. The attack may be launched remotely. The exploit has been released to...
PT-2026-111280
Name of the Vulnerable Software and Affected Versions SourceCodester Performance Indicator System version 1.0 Description A security flaw allows remote attackers to perform SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. The issue exists...
ROS-20261013-73-0463
The vulnerability of the tunxdpone function in the drivers/net/tun.c file of the Linux kernel’s network device driver module is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a system failure...
CVE-2026-102186: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally...
PT-2026-111997
Name of the Vulnerable Software and Affected Versions Windows Distributed File System DFS affected versions not specified Description An untrusted pointer dereference in Windows Distributed File System DFS allows an unauthorized attacker to elevate privileges over a network. Recommendations At th...
ROS-20261013-73-0465
The vulnerability of the tunxdpone function in the drivers/net/tun.c file of the Linux kernel’s network device driver leads to an infinite loop when a condition for exiting the loop is not met. Exploiting this vulnerability could allow an attacker to cause a system failure...
CVE-2026-102205: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
PT-2026-112578
Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description An absolute path traversal issue exists in the Windows Encrypting File System EFS. This allows an authorized attacker to elevate privileges over a network...