45084 matches found
August 11, 2026-KB5121646 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2
None None...
August 11, 2026-KB5121645 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server 2019
None None...
Approximate Bayesian Inference Framework Software Advisory
Summary: A potential security vulnerability for some Approximate Bayesian Inference Framework software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-32788 Description: Uncontrolled search pat...
Intel® Workload Services Framework Software Advisory
Summary: A potential security vulnerability for some Intel® Workload Services Framework software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-28757 Description: Protection mechanism failure...
CVE-2026-32788: Uncontrolled Search Path Element
Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit 484c949 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of...
CVE-2026-28757: Protection Mechanism Failure
Protection mechanism failure for some IntelR Workload Services Framework software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...
CVE-2026-65810: Relative Path Traversal
Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally...
CVE-2026-62872: Incorrect Authorization
Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network...
PT-2026-70593
Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An issue exists where unchecked input for a loop condition allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment, there is no information abo...
CVE-2026-73229: Exposure of Sensitive Information to an Unauthorized Actor
Django REST framework is a powerful and flexible toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's restframework/renderers.py AdminRenderer.render uses overridemethod to simulate GET and directly invokes view.get without view.checkpermissions while rendering an invalid write...
CVE-2026-73228: Uncontrolled Resource Consumption
Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing in restframework/request.py Request.parse passes the underlying HttpRequest stream to JSONParser and FormParser for application/json and application/x-www-form-urlencoded bodies...
CVE-2026-8158: Undefined Security Weakness
The Signed Video Framework contained a buffer overflow issue which could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of signed content. The AXIS OS device's signed video functionality remains unaffected...
CVE-2026-5303: Time-of-check Time-of-use (TOCTOU) Race Condition
The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces...
CVE-2026-6505: Time-of-check Time-of-use (TOCTOU) Race Condition
The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces...
CVE-2026-6181: Authentication Bypass by Spoofing
The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service account...
CVE-2026-18688: Out-of-bounds Read
An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash denial of service and may potentially expose ...
PT-2026-70853
Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description An issue in the aggregation framework allows an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting a specially formed aggregation command...
PT-2026-70859
Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description An issue in the aggregation framework allows an authenticated user with read-only privileges to execute write operations on collections they are not authorized to modify. This occurs...
PT-2026-70846
Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description An issue in the aggregation framework allows an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a specific aggregation...
