38136 matches found
CVE-2026-9046
A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code...
CVE-2026-9046
A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code...
CVE-2026-14266
creationtimestamp| type| source ---|---|--- 2026-07-16 16:33:36+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqro25h4we2v 2026-07-17 05:20:54+00:00| seen| https://bsky.app/profile/thecybersecguru.com/post/3mqsywb7tak2d 2026-07-17 05:39:01+00:00| seen|...
CVE-2026-14890
creationtimestamp| type| source ---|---|--- 2026-07-16 15:44:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrlcw3ngt2i 2026-07-16 18:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrvrtd76h2w 2026-07-23 12:59:29+00:00| seen|...
CVE-2026-63305
creationtimestamp| type| source ---|---|--- 2026-07-16 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116929896586145034 2026-07-16 13:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqrdssbvep2z 2026-07-16 13:44:04+00:00| seen|...
Security Bulletin: The IBM Common Licensing IBM WebSphere Application Server Liberty could provide weaker than expected security
Summary IBM WebSphere Application Server Liberty could provide weaker than expected security administering security settings when the appSecurity-1.0, appSecurity-2.0, appSecurity-3.0, appSecurity-4.0 or appSecurity-5.0 feature is enabled. Vulnerability Details Refer to the security bulletins...
web-scanner
🛡️ Web Scanner A native macOS app that scans a website for...
CVE-2026-20297
creationtimestamp| type| source ---|---|--- 2026-07-16 02:11:53+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqq5vdvydd2i 2026-07-16 19:00:32+00:00| seen| https://t.me/truesecator/8417 2026-07-17 00:00:49+00:00| seen| https://t.me/truesecator/8417 2026-08-21...
PT-2026-60515
A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges...
PT-2026-60521
Name of the Vulnerable Software and Affected Versions Legion Zone affected versions not specified Lenovo App Store affected versions not specified Description Insecure permissions in the Legion Zone and Lenovo App Store Windows applications, distributed exclusively in the Chinese market, may allo...
PT-2026-60514
A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code...
KLA91157 Multiple vulnerability in Microsoft Apps
Multiple vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to bypass security restrictions, execute arbitrary code. Original advisories CVE-2026-59117 Exploitation CVE list CVE-2026-59117 critical KB list Solution Install necessary updates from the KB...
CVE-2026-13104: Execution with Unnecessary Privileges
A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-13103: Improper Limitation of a Pathname to a Restricted Directory
A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code...
CVE-2026-36425
An issue in OPSWAT AppRemover Driver ardrv.sys v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation...
CVE-2026-36425
The OPSWAT AppRemover Driver (ardrv.sys) versions v2017.10.02.1551 and earlier contain an Improper Access Control vulnerability (CWE-284) in IOCTL handler 0x2420031. The driver exposes a device object (\.\ardrv) accessible to unprivileged local users without privilege validation. An attacker can ...
CVE-2026-9046: Insecure Inherited Permissions
A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code...
GHSA-Q78P-HJ9H-5466 FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data
Impact The FiftyOne App/API server fiftyone/server/app.py and the /media route fiftyone/server/routes/media.py unconditionally set a permissive CORS header Access-Control-Allow-Origin: on their responses. Because the embedded App server runs locally and is unauthenticated, this allows any website...
CVE-2026-52887
NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to 2.0.61, NocoBase @nocobase/plugin-notification-in-app-message exposed GET /api/myInAppChannels:list, where the filterlatestMsgReceiveTimestamp$lt value was inserted into a...