311236 matches found
CVE-2026-109155: Improper Limitation of a Pathname to a Restricted Directory
A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely. The project was informed of the problem early through an issue report but has not...
CVE-2026-109190: Server-Side Request Forgery (SSRF)
A vulnerability has been found in conductor-oss conductor 3.31.2. This affects the function ListApiToolsTask.start of the file ListApiToolsTask.java of the component API Tool Configuration. The manipulation of the argument specUrl leads to server-side request forgery. The attack is possible to be...
CVE-2026-109607: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. Th...
CVE-2026-108968: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/saleshistory.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...
Microsoft Windows: CVE-2026-96215: Windows Autopilot Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Autopilot allows an authorized attacker to elevate privileges locally...
PT-2026-113028
External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...
CVE-2026-83879: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70059: Windows OLE Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally...
PT-2026-112632
Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A heap-based buffer overflow exists in Windows Push Notifications. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occu...
Microsoft Windows: CVE-2026-96313: Windows Push Notifications Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
PT-2026-111326
Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System versions up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c Description An issue exists in the Password Reset component within the file 'User/forgot3.php'. Remote attackers can perform SQL injection, a...
Microsoft Windows: CVE-2026-69952: Windows Overlay Filter Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
PT-2026-112234
Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A heap-based buffer overflow occurs in the Windows Kernel, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue...
CVE-2026-103567: Buffer Over-read
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...
CVE-2026-83713: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...
CVE-2026-96235: Out-of-bounds Write
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-70199: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-70262: WebDAV Elevation of Privilege Vulnerability
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network...