196711 matches found
Microsoft Exchange Server Elevation of Privilege Vulnerability
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
Windows DHCP Server Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows DHCP Server allows an authorized attacker to elevate privileges locally...
.NET Framework Elevation of Privilege Vulnerability
Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally...
Windows Package Manager Elevation of Privilege Vulnerability
Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...
Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...
Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
Windows User Profile Service Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability
CVE-2026-6727 is an Information Disclosure vulnerability in the TPM 2.0 reference implementation involving an RSA OAEP timing side channel. MITRE assigned this CVE on behalf of the Trusted Computing Group. This document incorporates updates to Microsoft Windows that address this vulnerability...
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-68298
A flaw was found in the Linux kernel's drm/xe/vm module. During the creation of a virtual machine VM, an error in resource allocation could lead to a Shared Virtual Memory SVM resource leak. This occurs because the kernel's resource deallocation functions are not consistently called when an error...
MINI-M3Q2-242R-QC68
Bulletin has no description...
CVE-2026-68427
A flaw was found in the gpu: host1x component of the Linux kernel. The host1xbounpin function incorrectly dereferences a memory mapping after it has been freed, leading to a use-after-free vulnerability. This issue could allow a local attacker to cause memory corruption, potentially leading to a...
SonicWall Email Security Affected By Multiple Vulnerabilities
1 CVE-2026-66149 - Improper Control of Generation of Code 'Code Injection' Vulnerability via netmaskImproper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restrict...
CVE-2026-72780
Craft CMS before 5.10.5 fails to persist updated credential counters after WebAuthn assertion validation in the passkey login endpoint. Attackers can replay captured login request bodies containing requestOptions and response to create additional authenticated sessions for victim accounts...
CVE-2026-58115
A vulnerability has been identified in SIMATIC IoT2050 Advanced 6ES7647-0BA00-1YA2 All versions V4.3.4.1 running Industrial OS with Node-RED installed. Affected devices do not enforce authentication on the Node-RED HTTP interface, allowing unauthenticated access to programming nodes that are...
CVE-2026-57263
A vulnerability has been identified in LOGO! Soft Comfort All versions V9. The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force...
CVE-2026-69109
Siemens License Server (SLS) is affected across all versions
EUVD-2026-56126
A vulnerability has been identified in Siemens License Server SLS All versions V5.3. The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application...
EUVD-2026-56118
A vulnerability has been identified in LOGO! Soft Comfort All versions V9. The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force...