145735 matches found
CVE-2026-62886
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...
CVE-2026-62842
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...
CVE-2026-62871
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...
CVE-2026-62839
Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-62815
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
CVE-2026-62698
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally...
CVE-2026-61345
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-59138
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-59136
Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally...
CVE-2026-59133
Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...
CVE-2026-59124
Deserialization of untrusted data in Microsoft High Performance Computing HPC Pack allows an unauthorized attacker to execute code over a network...
CVE-2026-58651
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-59119
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
CVE-2026-54123
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
UBUNTU-CVE-2026-62898
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
CVE-2022-50997 Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp
Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...
CVE-2022-50997 Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp
Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...
CVE-2022-50997
The CVE-2022-50997 entry concerns Weaver (Fanwei) E-cology 8.0 and 9.0, where a SQL injection vulnerability exists in the HrmCareerApplyPerView.jsp endpoint. An unauthenticated attacker can manipulate the id parameter (via a crafted GET request) to perform UNION-based injections against a Microso...
CVE-2026-62917
CVE-2026-62917 concerns Microsoft SharePoint (Office SharePoint) with an improper input validation flaw. The vulnerability allows an authorized attacker to perform spoofing over a network. Documents identify the affected product as SharePoint Server and describe the root cause as input validation...
