31737 matches found
PT-2026-87232
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-79574
An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...
CVE-2026-79574: Improper Control of Generation of Code
An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...
PT-2026-87112
An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...
CVE-2026-69303: Out-of-bounds Read
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
CVE-2026-76931: Improper Neutralization of Input During Web Page Generation
The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 3.3.205 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Custom-level...
CVE-2026-69579: Use After Free
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
PT-2026-87301
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network...
PT-2026-87582
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-83997: Use After Free
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-69645: Use After Free
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally...
PT-2026-87655
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...
CVE-2026-86510: Out-of-bounds Write
A vulnerability has been found in D-Link DIR-822A A101. Affected is the function tunnelsetparams of the component L2TP Control Message Parser. Such manipulation leads to out-of-bounds write. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...
PT-2026-86950
SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the affected service could exploit this weakness to register an unauthorized component and potentially...
CVE-2026-72932: Buffer Over-read
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network...
PT-2026-87341
Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally...
PT-2026-87850
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network...
EUVD-2026-72911
An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...
