4935 matches found
CVE-2025-32853
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UnlockDatabaseSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...
CVE-2025-32840
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'LockGateway' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and wri...
CVE-2025-29803
Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally...
CVE-2025-25002
Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjacent network...
CVE-2025-29808
Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally...
CVE-2025-26635
Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...
CVE-2025-29812
Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally...
CVE-2025-29793
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2025-29810
Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network...
CVE-2025-29802
Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally...
CVE-2025-29811
Improper input validation in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...
CVE-2025-27478
Heap-based buffer overflow in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...
CVE-2025-27484
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over a network...
CVE-2025-27727
Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2025-27743
Untrusted search path in System Center allows an authorized attacker to elevate privileges locally...
CVE-2025-26679
Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally...
CVE-2025-26640
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...
CVE-2025-26648
Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally...