Lucene search
+L

1881 matches found

Snyk
Snyk
•added 2026/05/18 5:48 p.m.•20 views

Improper Validation of Array Index

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS6.9AI score0.00163EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/05/18 5:48 p.m.•42 views

ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define

An invalid connected-components:keep-top value could result in a heap buffer over-read when performing the connected components operation...

7.1CVSS7.2AI score0.00163EPSS
SaveExploits0References3Affected Software18
Snyk
Snyk
•added 2026/05/18 5:48 p.m.•21 views

Improper Validation of Array Index

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS6.9AI score0.00163EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/05/18 5:48 p.m.•18 views

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index in the connected-components when an invalid value is supplied to the keep-top parameter. An attacker can access sensitive memory contents or cause a partial denial of service by providing a specially...

7.1CVSS7AI score0.00163EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/16 12:00 a.m.•27 views

PT-2026-41776

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An invalid connected-components:keep-top value can lead to a heap buffer over-read during the connected components operation. A heap buffer over-read occurs when...

7.5CVSS6.4AI score0.01934EPSS
SaveExploits4References161
BDU FSTEC
BDU FSTEC
•added 2026/05/15 12:00 a.m.•17 views

The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, relates to access segmentation errors, allowing attackers to escalate their privileges.

The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, is related to access control errors. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS5.8AI score0.00298EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/05/15 12:00 a.m.•22 views

Security Updates for Azure Connected Machine Agent < 1.63 (May 2026)

The Microsoft Azure Connected Machine Agent installation on the remote host is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability: - Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...

7.8CVSS7.1AI score0.00298EPSS
SaveExploits0References2
Akamai Blog
Akamai Blog
•added 2026/05/14 1:00 p.m.•21 views

The Internet Has a Front Door — The Edge Is Now Intelligent

Recent improvements in the capabilities of the edge network have created a smarter, more connected edge. These changes call for a reassessment of edge strategy...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/05/13 8:22 p.m.•22 views

CVE-2026-40381

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00298EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/13 6:30 p.m.•26 views

EUVD-2026-30056

A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...

6.3CVSS5.9AI score0.0034EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/13 8:26 a.m.•62 views

CVE-2026-2515

The Hostinger Reach plugin for WordPress (v

5.3CVSS5.6AI score0.00378EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/05/13 8:26 a.m.•17 views

CVE-2026-2515

The Hostinger Reach – AI-Powered Email Marketing for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'handleajaxaction' function in all versions up to, and including, 1.3.8. This makes it possible for authenticated...

5.3CVSS5.7AI score0.00378EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•43 views

EUVD-2026-29657

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00298EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/12 6:17 p.m.•25 views

CVE-2026-40381

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00298EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/12 4:59 p.m.•51 views

CVE-2026-40381 Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

7.8CVSS0.00298EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/12 4:59 p.m.•16 views

CVE-2026-40381 Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

7.8CVSS7.3AI score0.00298EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/12 4:59 p.m.•134 views

CVE-2026-40381

CVE-2026-40381: Improper access control in the Azure Connected Machine Agent enables a locally authenticated attacker to elevate privileges. The vulnerability affects the Azure Connected Machine Agent; attacker must have local access and low privileges, with no user interaction required. The CVSS...

7.8CVSS7.2AI score0.00298EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/05/12 4:59 p.m.•18 views

CVE-2026-40381

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00298EPSS
SaveExploits0References2Affected Software1
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•30 views

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...

7.8CVSS7.3AI score0.00298EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•28 views

Microsoft Azure Connected Machine Agent 访问控制错误漏洞

Microsoft Azure Connected Machine Agent is a core component of Microsoft that connects non-Azure servers to the Azure console. There is an access control vulnerability present in Microsoft Azure Connected Machine Agent. Attackers can exploit this vulnerability to gain higher privileges...

7.8CVSS5.8AI score0.00298EPSS
SaveExploits0References2
Rows per page
Query Builder