CVE-2026-40712

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contains an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-40714

Dell PowerProtect Data Manager, before version 20.2.0.0, is affected by an Improper Input Validation vulnerability that could allow a high-privilege attacker with remote access to achieve Elevation of Privilege. The CVE entry lists a CVSSv3.1 base score of 7.2 (HIGH) with network access, high imp...

EUVD-2025-210499

An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe...

The vulnerability of the Azure OpenAI cloud platform, related to insufficient validation of requests on the server side, allows attackers to escalate their privileges.

The vulnerability of the Azure OpenAI cloud platform is related to insufficient validation of requests at the server side. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

CVE-2025-50329

An issue in ConeXware, Inc Power Archiver versions prior to v.22.00.12 allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe executable. To mitigate this vulnerability, users should update the software to version 22.00.12 or later . Exploitation details a...

CVE-2025-50329

An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe...

ROS-20260721-73-0033

The vulnerability of the Companion browser components in Google Chrome and Microsoft Edge is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

CVE-2026-52472

SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the PortInfoMapper.xml file...

CVE-2026-52472

SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the PortInfoMapper.xml file...

CVE-2026-50759

An issue in exo-explore exo 1.0.69 allows a remote attacker to escalate privileges via the GET /state and DELETE /instance/instanceid endpoints with no authentication...

CVE-2026-52470

SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the RecordStateMapper.xml file...

CVE-2026-50759

An issue in exo-explore exo 1.0.69 allows a remote attacker to escalate privileges via the GET /state and DELETE /instance/instanceid endpoints with no authentication...

ROS-20260720-73-0054

The vulnerability of the InterestGroups component in the Google Chrome browser is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the ColdFusion software platform, related to the lack of measures taken to protect the website structure, allows attackers to enhance their privileges.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

ROS-20260720-73-0037

The vulnerability of the Feedback component in Google Chrome relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

ROS-20260720-73-0001

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their ability to allow unlimited loading of dangerous files, enabling attackers to increase their privileges.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the ability to download files of a malicious nature without limitation. Exploiting these vulnerabilities can allow attackers t...

HPLIP: Incomplete Fix for CVE-2026-8631

A flaw was found in HPLIP HP Linux Imaging and Printing Software. This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling...

The vulnerability of the SyncFabric cloud service for synchronizing Microsoft Entra Provisioning Service allows a perpetrator to escalate their privileges.

The vulnerability of the SyncFabric cloud service for synchronizing Microsoft Entra Provisioning Services is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of Active Directory Certificate Services on Windows operating systems allows attackers to increase their privileges.

The vulnerability of Active Directory Certificate Services on Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...