Azure Storage Explorer Elevation of Privilege Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

firefox: thunderbird: Information disclosure in the Storage: IndexedDB component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Storage: IndexedDB component...

firefox: thunderbird: Information disclosure in the Storage: IndexedDB component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Storage: IndexedDB component...

CVE-2026-57263

CVE-2026-57263 affects LOGO! Soft Comfort for all versions

CVE-2026-19391

The CVE affects the insights-core password redaction layer, which does not recognize credentials beyond the literal string 'password'. This allows sensitive credentials such as SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device credentials to be included in cleartext in ar...

EUVD-2025-210676

The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices. By placing a crafted symbolic link on supported storage media, an attacker may cause the system to resolve the link. Successful exploitation may allow unauthorized read access to...

EUVD-2025-210675

In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. Successful exploitation may allow access to decrypted...

EUVD-2026-55880

SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects using a hard-coded cryptographic key. An attacker with high privileges and local access to the server could retrieve these objects and decrypt the stored credentials. Successful...

PT-2026-70882

Name of the Vulnerable Software and Affected Versions Ente versions prior to 2026.07.28 Description The 2of3 card format version 1 stores the secret byte length and 32-bit FNV-1a checksum a non-cryptographic hash function used for fast data indexing in cleartext on every card. This allows an...

PT-2026-70447

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description Sensitive information is stored in cleartext, which allows an authorized attacker to perform local tampering to affect the system. Recommendations At the moment, there is no information...

CVE-2026-65814: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally...

PT-2026-70430

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

CVE-2026-57104: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-61359: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-61928: Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally...

CVE-2026-62695: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-47702: Cleartext Storage of Sensitive Information

TypeBot is a chatbot builder tool. In version 3.16.1, API tokens bearer credentials used to authenticate against the builder API are stored in the database as cleartext strings. An attacker who gains read access to the database e.g., via SQL injection, backup exposure, or insider access can extra...

PT-2026-70461

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

PT-2026-70698

Name of the Vulnerable Software and Affected Versions Windows Storage Port Driver affected versions not specified Description A heap-based buffer overflow exists in the Windows Storage Port Driver. This issue occurs due to an integer overflow, which allows an authorized attacker to elevate...