600309 matches found
CVE-2026-56654
A flaw was found in Gitea. This vulnerability allows an attacker to escalate their privileges by manipulating the scope of an access token within the API. This means an attacker could gain unauthorized access to sensitive functions or data, potentially leading to full control over affected...
CVE-2026-64967
A path traversal vulnerability in ATutor's error log viewer allows an attacker with administrative privileges to access arbitrary files outside the intended logs directory. This can lead to unauthorized access to sensitive files and other resources accessible to the web server process. Product is...
CVE-2026-64969
ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...
CVE-2026-64963
A path traversal vulnerability in ATutor allows an authenticated user to access files from other course directories when the ATFORCEGETFILE configuration option is enabled. This can lead to unauthorized access to files and disclosure of information about the filesystem structure. Product is no...
CVE-2026-15706
Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application BMS allows Authentication Bypass. This issue affects Baylan Smart Meter Management Application BMS: before v1.1.10.142...
GO-2026-4950 vulnerabilities
Vulnerabilities for packages: dapr...
CVE-2026-74014
creationtimestamp| type| source ---|---|--- 2026-08-20 14:09:31+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjgct3uyj2b 2026-08-20 14:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjgds3hhj2b...
Azure Arc Elevation of Privilege Vulnerability
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
Microsoft Exchange Online Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...
Azure Data Manager for Energy Remote Code Execution Vulnerability
Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...
Azure Data Factory Information Disclosure Vulnerability
Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...
Azure SQL Database Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
Microsoft Word Information Disclosure Vulnerability
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
Microsoft Copilot in Azure Information Disclosure Vulnerability
Server-side request forgery ssrf in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network...
Microsoft Entra ID Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network...
Azure SQL Database Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...
Azure Data Factory Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...
Azure SQL Database Elevation of Privilege Vulnerability
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
Critical Arbitrary File Upload Vulnerability Patched in Elementor Pro WordPress Plugin
On July 24th, 2026, we received a submission for an Unauthenticated Arbitrary File Upload vulnerability in Elementor Pro, a WordPress plugin with an estimated 6,000,000 active installations. This vulnerability makes it possible for unauthenticated attackers to upload arbitrary files, including...
EUVD-2026-63370
ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...