1518 matches found
CVE-2026-96220
The Windows Assigned Access feature contains an improper control of generation of code (code injection) vulnerability. This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-94 . No specific exploit links or exploit details are p...
Windows Assigned Access Elevation of Privilege Vulnerability
Improper control of generation of code 'code injection' in Windows Assigned Access allows an authorized attacker to elevate privileges locally...
git-vuln-finder
git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...
CVE-2022-39197
CVE-2022-39197 CVE-2022-39197 "ID": "CVE-2022-39197", "STATE": "RESERVED"...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: cfg80211: Calling cfg80211stopap when switching from P2PGO type If the user-space tools switch from NL80211IFTYPEP2PGO to NL80211IFTYPEADHOC via sendmsgNL80211CMDSETINTERFACE, it does not call the cleanup function cfg80211stopap...
CVE-2026-82920
Mattermost versions 11.9.x ≤ 11.9.0 , 11.8.x ≤ 11.8.4 , and 11.7.x ≤ 11.7.7 fail to enforce authorization boundaries on the ABAC policy update endpoint. A channel or team administrator can detach a system-assigned ABAC parent policy by sending a crafted PUT /api/v4/access_control_policies request...
Missing Authorization
Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Missing Authorization in the GET /api/v1/hardware//assigned/components endpoint, which does not properly enforce the required permission check. An attacker can access...
CVE-2026-86764 Snipe-IT 8.6.4 before 8.7.0 Permission Bypass via assigned components
Snipe-IT through 8.6.4 fixed in 8.7.0 does not enforce the components.view permission on the authenticated endpoint GET /api/v1/hardware//assigned/components. The endpoint authorizes only assets.view on the parent asset before returning linked component details; the components.view check is appli...
CVE-2026-86764 Snipe-IT 8.6.4 before 8.7.0 Permission Bypass via assigned components
Snipe-IT through 8.6.4 fixed in 8.7.0 does not enforce the components.view permission on the authenticated endpoint GET /api/v1/hardware//assigned/components. The endpoint authorizes only assets.view on the parent asset before returning linked component details; the components.view check is appli...
CVE-2026-86764: Missing Authorization
Snipe-IT through 8.6.4 fixed in 8.7.0 does not enforce the components.view permission on the authenticated endpoint GET /api/v1/hardware/ /assigned/components. The endpoint authorizes only assets.view on the parent asset before returning linked component details; the components.view check is...
CVE-2026-86674
creationtimestamp| type| source ---|---|--- 2026-09-08 19:40:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cnumft23wgo3e...
PT-2026-87051
These are all security issues fixed in the xen-4.22.0 04-1.1 package on the GA media of openSUSE Tumbleweed...
MINI-9PRW-W2C6-5WGM
Bulletin has no description...
PT-2026-86212
CVE ID :CVE-2026-23584 Published : Sept. 2, 2026, 7:51 a.m. | 19 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-42007
creationtimestamp| type| source ---|---|--- 2026-08-28 14:07:28+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu5jwjpibm2c 2026-08-29 05:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu76lzhide2t 2026-08-29 23:40:03+00:00| seen|...
BELL-CVE-2026-74601
Bulletin has no description...
PT-2026-80846
CVE-2026-76069 - Rejected reason: This CVE ID has been rejected or CVE ID :CVE-2026-76069 Published : Aug. 21, 2026, 11:16 p.m. | 3 hours, 34 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for...
PT-2026-80845
CVE-2026-73323 - Rejected reason: This CVE ID has been rejected or CVE ID :CVE-2026-73323 Published : Aug. 21, 2026, 11:16 p.m. | 3 hours, 34 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for...