92235 matches found
CVE-2026-45635: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Universal Plug and Play upnp.dll allows an unauthorized attacker to execute code over a network...
CVE-2026-41977: Integer Overflow or Wraparound
DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-9754: Use of Uninitialized Variable
An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command...
CVE-2026-9211: Improper Input Validation
An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation...
CVE-2026-42836: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Function Discovery Service fdwsd.dll allows an authorized attacker to elevate privileges locally...
CVE-2026-11764: Improper Handling of Insufficient Permissions or Privileges
When creating an export of all reusable media, the secrets of connected gift cards were included in the export even if the user creating the export does not have permission to view gift cards. This is inconsistent with the UI and API where only the first letters of the gift card secret are shown...
CVE-2026-9742: Improper Validation of Specified Type of Input
When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of the "authenticate" command that lead to server crash. The authenticate command is accessible to unauthenticated clients, leading to pre-auth denial-of-service in affected product...
CVE-2026-9747: Reachable Assertion
Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server...
phpVMS 7.0.5 Security Exposure Scanner
This script is a non-destructive security scanner designed to assess phpVMS installations by performing read-only HTTP requests. It fingerprints targets using known phpVMS-related signatures and checks for the presence and accessibility of common importer and administration endpoints...
CVE-2026-0418: External Control of System or Configuration Setting
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system...
CVE-2026-47643: External Control of File Name or Path
External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network...
CVE-2026-9751: Insertion of Sensitive Information into Log File
The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text...
CVE-2026-47292: Inclusion of Functionality from Untrusted Control Sphere
Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally...
CVE-2026-26236: Missing Authorization
A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We have already fixed the vulnerability in the following version: QuMagie 2.9.0 and later...
CVE-2026-41980: Exposure of Sensitive Information to an Unauthorized Actor
Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-43688: Heap-based Buffer Overflow
An issue was discovered in Malwarebytes 4.x and 5.x and Nebula 2020-10-21 and later. There is a Heap buffer overflow in various buffer encryption utilities...
CVE-2026-41978: Undefined Security Weakness
Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-44275: Improper Link Resolution Before File Access
Dell/Alienware Purchased Apps, versions prior to 1.1.32.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write...
CVE-2026-41974: Undefined Security Weakness
Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability...