233537 matches found
CVE-2026-34336 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2026-40380
Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack...
CVE-2026-40380 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
...
CVE-2026-40380 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
...
CVE-2026-40380
The CVE-2026-40380 entry describes a heap-based buffer overflow in the Volume Manager Extension Driver that could allow an authorized attacker to execute code under a physical-attack scenario. The NVD entry records a CVSS v3.1 base score of 6.2 (Medium) with impact on confidentiality, integrity, ...
CVE-2026-35419 Windows DWM Core Library Information Disclosure Vulnerability
...
CVE-2026-35419
CVE-2026-35419 describes an out-of-bounds read in Windows DWM Core Library that can disclose information locally by an authorized user. The available sources identify the vulnerability as a local-attack vector with low privileges required and no user interaction, resulting in a high confidentiali...
EUVD-2026-29490
Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges...
EUVD-2026-29489
An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials...
EUVD-2026-29491
SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution...
EUVD-2026-29488
OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2026-8111
SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution...
CVE-2026-8109
An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials...
CVE-2026-8051
OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2026-8110
Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges...
WordPress Smart Manager plugin <= 8.85.0 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin Smart Manager versions = 8.85.0...
CVE-2026-8111
SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution...
CVE-2026-8111
SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution...
CVE-2026-8111
CVE-2026-8111 describes an SQL injection in the web console of Ivanti Endpoint Manager prior to 2024 SU6. The vulnerability allows a remote authenticated attacker to achieve remote code execution via the web console, as indicated by the description and CVSS metrics (High, 8.8). Affected product: ...