CVE-2026-102047: Improper Validation of Consistency within Input

An Improper Validation of Consistency within Input vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated Layer 2 attacker to cause a denial of service in associated Layer 2 control protocols via a crafted MVRP Ethernet frame sent t...

PT-2026-113883

A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to crash the routing process via MPLS-TE fast-reroute signaling...

PT-2026-114283

Name of the Vulnerable Software and Affected Versions Dell Terraform Provider for Redfish versions 1.1.0 through 1.6.1 Description The redfish certificate resource component contains an issue that allows a high privileged attacker with remote access to potentially cause the exposure of sensitive...

PT-2026-114316

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...

CVE-2026-91883: Insertion of Sensitive Information into Log File

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information...

Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130147)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130147 advisory. A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-pat...

CVE-2026-88084

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-106090

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-106613

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-110145

Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110150

A privilege elevation flaw exists in the Installer component of Google Chrome on Windows versions prior to 155.0.8059.79 . This vulnerability allows a local attacker to obtain sensitive information by executing a local program. The issue has a High security severity in Chromium. Remediation is av...

EUVD-2026-100619

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-88084

A Denial of Service (DoS) vulnerability exists in Microsoft SQL Server due to the allocation of resources without limits or throttling . An authorized attacker can exploit this flaw over a network to disrupt service availability. Microsoft has released updates to address this issue, including KB5...

EUVD-2026-100711

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-100604

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-106618

Adobe ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863 ). A low-privileged attacker can exploit this issue to achieve arbitrary code execution in the context of the current user. The vulnerability requires no user interaction and is characterized by a changed scope . Sp...

EUVD-2026-100670

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

CVE-2026-106089

ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863) that could lead to arbitrary code execution within the context of the current user. A low-privileged attacker can exploit this issue without requiring any user interaction. The provided documents do not specify the exact...

CVE-2026-106613

Adobe ColdFusion is affected by an Improper Input Validation vulnerability (CWE-20). This flaw allows a low-privileged attacker to execute arbitrary code within the context of the current user. Exploitation does not require any user interaction. Specific technical details regarding the vulnerable...

CVE-2026-106613 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...