107015 matches found
The vulnerability of the corporate platform Microsoft Teams, related to errors in verifying cryptographic signatures, allows attackers to perform spear-phishing attacks.
The vulnerability of the corporate platform Microsoft Teams is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to carry out spear-phishing attacks remotely...
Vulnerability of the Microsoft SharePoint Online content management software, related to spear-phishing attacks
The vulnerability of the Microsoft SharePoint Online content management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
ROS-20260812-73-0016
The vulnerability in dnsdist is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
PT-2026-71165
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...
PT-2026-71271
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can execute arbitrary commands due to improper neutralization of shell metacharacters. This occurs when the system fails to properly filter or escape special characters...
PT-2026-71273
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the system fails to properly sanitize inp...
PT-2026-71188
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description An out-of-bounds write allows a remote attacker to execute arbitrary code. An out-of-bounds write occurs when a program writes data past the end of the intended buffer, potentially overwriting adjacen...
PT-2026-71160
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper authorization in the handling of high-authority threads allows a remote authenticated attacker to escalate privileges. Recommendations At the moment, there is no information about a newer...
PT-2026-70962
A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrf rx aar cb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. The manipulation of the argument num of media component/num of sub leads to buffer overflow. The attack can be initiated...
PT-2026-71156
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and manipulate files due to a path traversal vulnerability...
PT-2026-71181
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read...
PT-2026-71190
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A remote authenticated attacker can cause a denial of service due to improper neutralization of special elements in an OS command. This issue occurs when the system fails to properly sanitize input us...
PT-2026-71163
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and compromise system integrity due to an XML injection flaw...
PT-2026-71171
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to harvest credentials due to spoofing of Navigator for i...
PT-2026-70973
A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the component freeDiameter. This manipulation causes memory corruption. The attack is possible to be carried out remotely...
CVE-2025-15687: Improper Resource Shutdown or Release
A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smfgxccacb of the component SMF Diameter Gx Credit-Control-Answer Handler. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may b...
ROS-20260812-73-0011
The vulnerability of the BuildKit container-building software is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of Azure SQL Managed Instance, a PaaS service, arises from insufficient network connection restrictions for specified endpoints. This allows attackers to escalate their privileges.
The vulnerability of Azure SQL Managed Instance PaaS is related to insufficient network connection restrictions for specified endpoints. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
ROS-20260812-73-0019
The vulnerability in dnsdist relates to the failure to take measures to eliminate script-related HTML tags on web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Windows GDI+ interface on Windows operating systems allows attackers to execute arbitrary code.
The vulnerability of the Windows GDI+ interface on Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted file...