15 matches found
CVE-2025-29826
Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network...
CVE-2025-29826
Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network...
CVE-2025-29826 Microsoft Dataverse Elevation of Privilege Vulnerability
...
CVE-2025-29826 Microsoft Dataverse Elevation of Privilege Vulnerability
...
CVE-2025-29826
creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review...
CVE-2022-29826
creationtimestamp| type| source ---|---|--- 2025-04-25 18:08:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13484...
CVE-2024-29826
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code...
CVE-2024-29826
CVE-2024-29826 is an unspecified SQL Injection in the Core server of Ivanti Endpoint Manager (EPM) 2022 SU5 and earlier. The vulnerability allows an unauthenticated attacker on the same network to execute arbitrary code. Affected component: Core server SQL logic. Impact: remote code execution wit...
CVE-2024-29826
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code...
CVE-2024-29826
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code...
CVE-2024-29826
creationtimestamp| type| source ---|---|--- 2024-05-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1300 2024-05-24 23:27:46+00:00| seen| https://t.me/itsecnews/4463...
mod_http2 security update
1.15.19-5.1 - Resolves: RHEL-29826 - modhttp2: httpd: CONTINUATION frames DoS CVE-2024-27316...
Mitsubishi Electric FA Engineering Software (Update C)
1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: GX Works3, MX OPC UA Module Configurator-R Vulnerabilities: Cleartext Storage of Sensitive Information, Use of Hard-coded Password, Insufficiently Protected Credentials,...
CVE-2022-29826
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control SettingGX Works3 related software versions from 1.000A to 1.042U allows a remote unauthenticated attacker to disclose sensitive information. As a result,...
CVE-2022-29826
CVE-2022-29826 involves a Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 (versions 1.000A–1.087R) and Motion Control Setting (GX Works3 related software) (versions 1.000A–1.042U). The root cause is cleartext storage that could allow a remote unauthentica...