358245 matches found
PT-2026-113265
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-70571: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-88115: Windows Server for NFS Remote Code Execution Vulnerability
Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network...
Microsoft Exchange: CVE-2026-70571: Microsoft Exchange Server Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...
PT-2026-111575
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.5 and 9.0 Description A flaw in the CSIv2 inbound propagation handler allows a remote attacker to bypass authentication. Recommendations At the moment, there is no information about a newer version...
PT-2026-113264
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113391
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods...
PT-2026-111722
ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/id endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply isDraft=true or...
CVE-2026-110131: Missing Authorization
ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/id endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply isDraft=true or...
PT-2026-112877
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
PT-2026-113024
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in the DNS Server allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer...
PT-2026-112389
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2016 CU23 Microsoft Exchange Server 2019 CU14 Microsoft Exchange Server 2019 CU15 Microsoft Exchange Server Subscription Edition RTM Description A stack-based buffer overflow exists in the internal content-conversion...
Microsoft Windows: CVE-2026-83722: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-97838: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113269
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113132
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...
PT-2026-113259
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-111844
Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...
PT-2026-111389
Name of the Vulnerable Software and Affected Versions Industrial Edge App Publisher versions prior to V1.27.9 Description The software fails to properly validate the server certificate during the initiation of a TLS connection. This flaw enables a Man-in-the-Middle attack, where an attacker can...