CVE-2023-26596

Improper access control in some IntelR ThunderboltTM DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-26596

Improper access control in some IntelR ThunderboltTM DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-26596

Improper access control in some IntelR ThunderboltTM DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-26596

CVE-2023-26596 affects Intel Thunderbolt DCH drivers for Windows prior to version 88. Description: improper access control could allow an authenticated local user to enable denial of service. Impact is local DoS without requiring network access; affected component is the Intel Thunderbolt DCH dri...

CVE-2022-26596

creationtimestamp| type| source ---|---|--- 2022-04-25 20:36:21+00:00| seen| https://t.me/cibsecurity/41394...

CVE-2022-26596

CVE-2022-26596 is a documented XSS vulnerability in the Journal module of Liferay Portal/ Liferay DXP. The flaw allows remote attackers to inject arbitrary web script or HTML via web content template names on the Journal module’s web content display configuration page. Affected products/versions:...

CVE-2022-26596

Cross-site scripting XSS vulnerability in Journal module's web content display configuration page in Liferay Portal 7.1.0 through 7.3.3, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19, and 7.2 before fix pack 8, allows remote attackers to inject arbitrary web script or HTML via we...

CVE-2022-26596

Cross-site scripting XSS vulnerability in Journal module's web content display configuration page in Liferay Portal 7.1.0 through 7.3.3, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19, and 7.2 before fix pack 8, allows remote attackers to inject arbitrary web script or HTML via we...

CVE-2021-26596

creationtimestamp| type| source ---|---|--- 2021-10-02 10:52:31+00:00| seen| https://t.me/cKure/7402...

CVE-2021-26596

The CVE-2021-26596 entry concerns Nokia NetAct 18A. A vulnerability exists where a malicious user can change the filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim’s web browser. The attack is typically delivered by placing the malicious content...

CVE-2020-26596

CVE-2020-26596 affects the Dynamic OOO widget in Elementor Pro for WordPress up to version 3.0.5. It permits remote authenticated users with the Editor role to upload executable PHP code via the PHP Raw snippet, enabling arbitrary code execution. Mitigation suggested in the description is to remo...

CVE-2020-26596

The Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote authenticated users to execute arbitrary code because only the Editor role is needed to upload executable PHP code via the PHP Raw snippet. NOTE: this issue can be mitigated by removing the Dynamic OOO...