594563 matches found
CVE-2026-20707
Hardware logic contains race conditions for some 3rd Gen IntelR XeonR Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result...
CVE-2026-20707
CVE-2026-20707 involves race conditions in hardware logic for some 3rd Gen Intel Xeon Scalable Processors within Ring 3. An unprivileged, authenticated user with a high-complexity attack could potentially cause a denial of service, with local access requirements and no user interaction needed. Th...
CVE-2026-20705
Insecure storage of sensitive information in the IntelR TDX module for some IntelR platform within Ring 0: Trust Domain may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially...
CVE-2026-20705
CVE-2026-20705 describes insecure storage of sensitive information in the Intel(R) TDX module for Intel platform Ring 0 Trust Domain. The issue allows potential data exposure via local access by a system software adversary with a privileged user and high attack complexity, requiring no user inter...
EUVD-2026-56470
Protection mechanism failure for some IntelR Data Center Attestation Primitives IntelR DCAP may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network...
CVE-2026-20702
Protection mechanism failure for some IntelR Data Center Attestation Primitives IntelR DCAP may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network...
CVE-2026-20702
Technical details about CVE-2026-20702 are not publicly available in the provided documents. No product/vendor/version specifics, exploit status, or remediation are described here. Monitor for updates.
EUVD-2026-56220
TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized typebotId and blockId and a foreign live resultId. The webhook resume handler...
EUVD-2026-56219
TypeBot is a chatbot builder tool. Prior to version 3.17.0, Typebot's WhatsApp status forwarding feature stores a workspace-configured webhook forwarding URL and later POSTs WhatsApp marketing/error status events to it from the server. The stored URL is only validated as a generic URL in settings...
CVE-2026-9214
Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality...
CVE-2026-56720
CamaleonCMS version 2.9.2 and earlier contains a missing authorization vulnerability in the admin users controller that allows any authenticated user to access any other user's profile data by supplying an arbitrary user ID parameter. Attackers can send a GET request to the admin profile endpoint...
CVE-2026-48495
TypeBot is a chatbot builder tool. Prior to version 3.17.0, the Google Sheets OAuth callback decodes a base64-encoded JSON state parameter and trusts the embedded workspaceId, typebotId, blockId, and redirectUrl without cryptographic integrity protection or authorization checks. The callback rout...
CVE-2026-53416
Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access...
CVE-2026-53415
Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access...
CVE-2026-42142
TypeBot is a chatbot builder tool. Prior to version 3.17.0, the handleGetSheets API handler POST /api/sheets/getSheets does not validate workspace membership, allowing any authenticated user to access and decrypt another workspace's Google Sheets OAuth credentials and retrieve spreadsheet data...
CVE-2026-18640
The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOKEDIT permission to write the notebook record outside the org's data store directory. The file written must have an extension of ".json.db" but can otherwise overwrite other metadata files...
CVE-2026-11738
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality...
CVE-2026-11737
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality...