171753 matches found
PT-2026-70756
Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
PT-2026-70762
Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description Improper input validation in Microsoft Office PowerPoint allows...
PT-2026-70076
Name of the Vulnerable Software and Affected Versions Samsung Open Source rlottie affected versions not specified Description Improper validation of the specified quantity in input allows for input data manipulation. Recommendations At the moment, there is no information about a newer version tha...
CVE-2026-51583
An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...
PT-2026-70376
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...
PT-2026-70377
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interactio...
PT-2026-70829
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, dtls server input handler and create new connected udp socket in src/apps/relay/dtls listener.c retain OpenSSL dtls1 reassemble fragment state for a 35-byte fragmented ClientHello declaring a 650,000-byte...
PT-2026-70038
Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to correctly validate client certificates during specific callback flows. An attacker with low privileges who possesses a certificate issued by the same trusted...
PT-2026-70347
Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description Improper input validation allows an attacker with high privileges to crash the application, resulting in a denial-of-service condition. This issue does not require user interaction...
PT-2026-70087
Name of the Vulnerable Software and Affected Versions Picketlink Federation SAML affected versions not specified Description The unsolicited response handler accepts forged assertions without verification or validation. This allows an unauthenticated attacker to authenticate as any principal in a...
PT-2026-70792
Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...
PT-2026-70075
Name of the Vulnerable Software and Affected Versions Samsung Open Source rlottie affected versions not specified Description An issue exists where improper validation of the specified quantity in the input and the allocation of resources without limits or throttling allows for excessive...
PT-2026-70021
Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence MII affected versions not specified Description An attacker with high privileges can submit specially crafted input to certain functionality that is processed without sufficient validation. This...
2026.3 IPU, Intel® Xeon® Processor Firmware Advisory
Summary: Potential security vulnerabilities in some Intel® Xeon® Processors may allow escalation of privilege. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-20713 Description: Always-incorrect control flow implementation i...
2026.3 IPU, Intel® Chipset Firmware Advisory
Summary: Potential security vulnerabilities in some Intel® Active Management Technology Intel® AMT and some Intel® Standard Manageability may allow denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details:...
PT-2026-70749
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
PT-2026-70603
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper input validation allows an authorized attacker to perform spoofing over a network, which enables them to affect the system. Recommendations At the moment, there i...
PT-2026-70097
Name of the Vulnerable Software and Affected Versions iperf3 affected versions not specified Description A flaw in the server's handling of control-channel JSON allows a remote attacker to cause a Denial of Service DoS. By sending crafted JSON containing oversized numeric parameters, specifically...
PT-2026-70696
Improper input validation in Power BI allows an authorized attacker to execute code over a network...
PT-2026-70231
Name of the Vulnerable Software and Affected Versions NETGEAR affected versions not specified Description Insufficient input validation allows authenticated administrators connected to the local network to make unauthorized modifications to router software and functionality. Recommendations At th...