29707 matches found
CVE-2026-31822
Sylius (PHP/Symfony eCommerce framework) has an XSS vulnerability in the shop checkout login form handled by ApiLoginController. When a login fails, AuthenticationFailureHandler returns a JSON message that is rendered into the DOM via innerHTML, allowing injected HTML/JS in the message to execute...
CVE-2026-0119
Summary: CVE-2026-0119 involves an out-of-bounds write caused by memory corruption in the function usim_SendMCCMNCIndMsg within usim_Registration.c. The vulnerability can enable a physical escalation of privilege with no additional execution privileges required and no user interaction needed. The...
CVE-2026-0110
In MMDATAIND of cnNrSmMsgHdlrFromMM.cpp, there is a possible EoP due to memory corruption. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-10600
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
EUVD-2026-10620
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...
EUVD-2026-10601
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
CVE-2026-30968
Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, the SSE endpoint /sse/v1/... in Coral Server did not strongly validate that a connecting agent was a legitimate participant in the session. Th...
CVE-2026-24282
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
CVE-2026-24282
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
CVE-2026-26128 Windows SMB Server Elevation of Privilege Vulnerability
...
CVE-2026-26128
CVE-2026-26128 concerns an elevation-of-privilege flaw in Windows SMB Server caused by improper authentication. The vulnerability affects Windows SMB Server and is described in connected sources as allowing an authorized local attacker to obtain higher privileges. Evidence from the connected docu...
CVE-2026-26128 Windows SMB Server Elevation of Privilege Vulnerability
...
CVE-2026-24294
CVE-2026-24294 affects Windows SMB Server. The core issue is improper authentication in the SMB component, enabling an authorized local attacker to elevate privileges. The CVE is rated high (CVSS 3.1 base 7.8) with local attack vector, low complexity, and no user interaction required, and the imp...
CVE-2026-24294 Windows SMB Server Elevation of Privilege Vulnerability
...
CVE-2026-24282 Push message Routing Service Elevation of Privilege Vulnerability
...
CVE-2026-24282 Push message Routing Service Elevation of Privilege Vulnerability
...
CVE-2026-24282
CVE-2026-24282 is a Microsoft-related local-elevation vulnerability labeled as a Push message Routing Service issue. The CVSS 3.1 base score is 5.5 (MEDIUM) with Confidentiality impact High, and Exploit Code Maturity is UNPROVEN. The attack vector is Local and requires Low privileges with no user...
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: CVE-2025-69228: Fixed denial of service through large payloads bsc1256022. CVE-2025-69226: Fixed brute-force leak of internal static file path components bsc1256020. CVE-2025-69224: Fixed unicode processing of header values could cause...
USN-8059-8: Linux kernel (NVIDIA) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; CVE-2025-22037, CVE-2025-37899...
