12737 matches found
CVE-2026-73304 Budibase: SSO OAuth2 Token Leakage via User Metadata Endpoints to Power-Role Users
Budibase is an open-source low-code platform. Prior to 3.39.25, GET /api/users/metadata and GET /api/users/metadata/:id returned user objects processed by packages/server/src/utilities/global.ts without removing oauth2.accessToken or oauth2.refreshToken. A user with the POWER role could retrieve...
MAL-2026-13958 Malicious code in power-assert-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff97d4bae356db6a165ae845ee186c814f89bd1ee40e839d6da054965bfbd823 power-assert-plus is a typosquat of power-assert. On every require, index.js detach-spawns node build/power-assert-plus.js. That build file is...
Malicious code in power-assert-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff97d4bae356db6a165ae845ee186c814f89bd1ee40e839d6da054965bfbd823 power-assert-plus is a typosquat of power-assert. On every require, index.js detach-spawns node build/power-assert-plus.js. That build file is...
SUSE CVE-2026-68104
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: invoke pmgenpdremove before freeing genpd Call pmgenpdremove to unregister from global list prior to releasing acpgenpd memory, and clear the pointer after free. cherry picked from commit...
RLSA-2026:53363 Important: fence-agents security update
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values...
Lack of transparency in the Microsoft Power BI server
Microsoft has identified a vulnerability in the Power BI server. A malicious individual could exploit this vulnerability to execute arbitrary code on the server. For successful exploitation, the malicious individual must have access to prior authentication. Microsoft has provided updates that...
Vulnerabilities in Microsoft Dynamics
Microsoft has identified vulnerabilities in Dynamics, both online and on-premise. These vulnerabilities allow a malicious individual to gain elevated privileges, execute arbitrary code, and/or access sensitive data. The most severe vulnerability has been assigned the CVE-2026-59118 identifier and...
CVE-2026-65811
Improper input validation in Power BI allows an authorized attacker to execute code over a network...
CVE-2026-62721
Insufficient granularity of access control in User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally...
CVE-2025-8087
A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...
EUVD-2025-210695
A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...
CVE-2025-8087
CVE-2025-8087 describes a DLL hijacking vulnerability in AMD Power Design Manager. The issue allows a malicious local attacker to escalate privileges during the uninstallation process, potentially enabling arbitrary code execution. Affected component is AMD Power Design Manager; root cause is DLL...
CVE-2025-8087
A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...
CVE-2025-8087
A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...
EUVD-2026-56638
Insufficient granularity of access control in User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally...
EUVD-2026-56446
Improper input validation in Power BI allows an authorized attacker to execute code over a network...
CVE-2026-65811 Power BI Remote Code Execution Vulnerability
...
CVE-2026-65811 Power BI Remote Code Execution Vulnerability
...
CVE-2026-65811
CVE-2026-65811 : This entry concerns Power BI with an issue described as improper input validation that allows an authorized attacker to execute code over a network. The CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 8.8 (HIGH). Affected component and root cause are stated onl...
