306 matches found
CVE-2026-20800 Notification API Leaks Private Repository Issue Titles After Collaborator Permission Revocation
Gitea's notification API does not re-validate repository access permissions when returning notification details. After a user's access to a private repository is revoked, they may still view issue and pull request titles through previously received notifications...
PT-2025-50802
Name of the Vulnerable Software and Affected Versions ADM versions 4.1.0 through 4.3.3.RKD2 ADM versions 5.0.0 through 5.1.0.RN42 Description An improperly validated TLS/SSL certificate when sending emails to an SMTP server via msmtp allows an attacker intercepting network traffic to execute a...
CVE-2025-48584
In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48576
In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-48576
In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-48576
The Google Android operating system contains a vulnerability in the NotificationManagerService.java file within the Framework component. Specifically, the updateNotificationChannelGroupFromPrivilegedListener function is susceptible to uncontrolled resource consumption due to insufficient validati...
CVE-2025-59500
Improper access control in Azure Notification Service allows an authorized attacker to elevate privileges over a network...
EUVD-2025-35746
Improper access control in Azure Notification Service allows an authorized attacker to elevate privileges over a network...
CVE-2025-59500
Improper access control in Azure Notification Service allows an authorized attacker to elevate privileges over a network...
CVE-2025-59500
CVE-2025-59500 is an elevation-of-privilege issue affecting the Azure Notification Service due to improper access control. The connected documents consistently describe privilege escalation over a network via this service. Affected component is Azure Notification Service; root cause is access-con...
CVE-2025-59500 Azure Notification Service Elevation of Privilege Vulnerability
...
CVE-2025-59500 Azure Notification Service Elevation of Privilege Vulnerability
...
Azure Notification Service Elevation of Privilege Vulnerability
Improper access control in Azure Notification Service allows an authorized attacker to elevate privileges over a network...
Microsoft Azure Notification Service access control vulnerability
Microsoft Azure Notification Service is a notification push service from Microsoft Corporation in the United States. An access control error vulnerability exists in Microsoft Azure Notification Service that stems from improper access control and could lead to elevation of privilege...
CVE-2025-59500: Improper Access Control
Improper access control in Azure Notification Service allows an authorized attacker to elevate privileges over a network...
PT-2025-43563
Name of the Vulnerable Software and Affected Versions Azure Notification Service affected versions not specified Description Improper access control in Azure Notification Service allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...
KLA89723 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Compute Resource Provider can be exploited...
EUVD-2016-2576
Malware in sbrugna...