119450 matches found
CVE-2026-47996
CVE-2026-47996 (Adobe Commerce / Magento Community Edition) : An Incorrect Authorization vulnerability could allow a high-privileged attacker to read arbitrary files from the file system outside the intended scope, with no user interaction required. Documented impact is access to sensitive files ...
CVE-2026-47996 Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. A high-privileged attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not requir...
CVE-2026-50649
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...
EUVD-2026-44397
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...
CVE-2026-50646
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...
CVE-2026-48252
Adobe Experience Manager is affected by CVE-2026-48252 (Missing Authentication for Critical Function, CWE-306). An attacker could bypass security measures and gain unauthorized write access without user interaction. The vulnerability has a CVSS v3.1 score of 8.6 (Network, Low attack complexity, N...
CVE-2026-48252 Adobe Experience Manager | Missing Authentication for Critical Function (CWE-306)
Adobe Experience Manager is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not...
CVE-2026-5040
TP-Link Deco M5 v1 uses a weak password hashing mechanism to store user credentials. An attacker who obtains the password hash through system compromise or privileged access could perform brute-force or dictionary attacks. Successful exploitation may result in disclosure of authentication...
CVE-2026-47302
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-47305
Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally...
CVE-2026-47304
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-47302
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
GHSA-XRCF-6JH3-GGVX Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode
Summary Anyquery's server mode does not disable or restrict native SQLite disk manipulation commands. Unauthenticated attackers connecting to the MySQL-compatible server port can use the ATTACH DATABASE command to write arbitrary SQLite databases to any path on the victim's filesystem where the...
EUVD-2026-44068
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
EUVD-2026-43904
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally...
EUVD-2026-43871
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...
EUVD-2026-43779
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...
EUVD-2026-44013
Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally...