348425 matches found
CVE-2026-98214
A flaw was found in the Linux kernel. A local user can bypass Security-Enhanced Linux SELinux access controls to execute restricted files on stacked filesystems. When modifying memory protections using the mprotect system call, the kernel fails to recheck security permissions on intermediate laye...
CVE-2026-76779
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges,...
CVE-2026-106155
In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links. When another user views t...
CVE-2026-106145
In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server...
CVE-2025-14123
The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist / restrictions. This makes it...
CVE-2026-76769
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-76769
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-76769
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are susceptible to a Missing Authorization vulnerability. A low-privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges . To mitigate this risk, it is recommended to update the ...
Vulnerabilities in Splunk Enterprise
Splunk has identified several vulnerabilities in Splunk Enterprise. These vulnerabilities apply to various versions of Splunk Enterprise and include insufficient authorization checks in REST API endpoints, allowing unauthorized users to access privileged functions or sensitive data. Some of these...
Exploit for CVE-2022-21812
Intel HAXM Kernel Driver: Reverse Engineering & CVE-2022-21812...
CVE-2025-14123
The Redux Framework plugin for WordPress (versions up to and including 4.5.11 ) is vulnerable to privilege escalation . The root cause is the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist restrictions. This allows authentica...
EUVD-2025-211057
The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist / restrictions. This makes it...
CVE-2025-14123 Redux Framework <= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation via Users Extension
The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist / restrictions. This makes it...
EUVD-2026-95528
The ARM64 MMU back-end allocated address space identifiers ASIDs for memory domains with a bare round-robin counter in archmemdomaininit arch/arm64/core/mmu.c. VMASIDBITS is 8, so only 255 ASIDs exist; once the counter wrapped, archmemdomaininit could hand an ASID to a new domain while a still-li...
CVE-2026-106155
Progress Telerik Report Server prior to version 12.2.26.1007 is vulnerable to a stored cross-site scripting (XSS) flaw in the shared reporting engine. An authenticated report author can embed javascript: or vbscript: URLs within report navigation actions or HTML text box links. If another user vi...
EUVD-2026-95524
In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links. When another user views t...
CVE-2026-106155 Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers
In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links. When another user views t...
CVE-2026-106145
Progress Telerik Report Server prior to version 12.2.26.1007 is vulnerable to a privilege escalation flaw due to incorrect privilege assignment in the service-agent SignalR hub . An authenticated user, such as a low-privilege or guest account with a valid bearer token, can register as a trusted s...
CVE-2026-106145 Privilege Escalation in Telerik Report Server Service-Agent Hub
In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server...
EUVD-2026-95523
In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server...