Lucene search
+L

6587 matches found

NVD
NVD
•added 2026/04/14 6:16 p.m.•17 views

CVE-2026-26176

Heap-based buffer overflow in Windows Client Side Caching driver csc.sys allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00333EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/14 4:58 p.m.•51 views

CVE-2026-26176 Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability

...

7.8CVSS0.00333EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/14 4:58 p.m.•72 views

CVE-2026-26176

Technical details about CVE-2026-26176 are not provided in the supplied documents. Monitor for updates from Microsoft Security Update Guide and CVE records for affected specifics, impact, and remediation.

7.8CVSS7.4AI score0.00333EPSS
SaveExploits0References1Affected Software14
Vulnrichment
Vulnrichment
•added 2026/04/14 4:58 p.m.•13 views

CVE-2026-26176 Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability

...

7.8CVSS7.3AI score0.00333EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/14 4:16 p.m.•21 views

CVE-2026-27316

A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection...

2.7CVSS0.00299EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/04/14 4:15 p.m.•19 views

Cross-site Scripting (XSS)

Overview org.webjars.npm:leaflet is a JavaScript library for mobile-friendly interactive maps Affected versions of this package are vulnerable to Cross-site Scripting XSS via the bindPopup method. An attacker can execute arbitrary JavaScript code in the context of a user's browser session by...

6.1CVSS5.9AI score0.00191EPSS
SaveExploits2References2
CVE
CVE
•added 2026/04/14 3:38 p.m.•54 views

CVE-2026-27316

The CVE-2026-27316 entry describes an insufficiently protected credentials vulnerability affecting Fortinet FortiSandbox: 5.0.0–5.0.5, FortiSandbox 4.4 (all versions), and FortiSandbox PaaS 5.0.1–5.0.5. Root cause: credentials stored or exposed in a way that can be read via client-side inspection...

2.7CVSS5.6AI score0.00299EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2026/04/14 3:38 p.m.•55 views

CVE-2026-27316

A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection...

2.7CVSS0.00299EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/14 3:38 p.m.•10 views

CVE-2026-27316

A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection...

2.7CVSS5.6AI score0.00299EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:00 p.m.•18 views

Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client Side Caching driver csc.sys allows an authorized attacker to elevate privileges locally...

7.8CVSS7.5AI score0.00333EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2026/04/14 5:17 a.m.•151 views

avsig

⚡ AVSIG JWT Inspector & Security Auditor - decode, anal...

5.8AI score
SaveExploits0
NVD
NVD
•added 2026/04/14 12:16 a.m.•22 views

CVE-2026-27674

Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java Web Dynpro Java, an unauthenticated attacker could supply crafted input that is interpreted by the application and causes it to reference attacker-controlled content. If a victim accesses the affected functionality, th...

6.1CVSS0.00286EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/14 12:06 a.m.•17 views

EUVD-2026-22146

Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java Web Dynpro Java, an unauthenticated attacker could supply crafted input that is interpreted by the application and causes it to reference attacker-controlled content. If a victim accesses the affected functionality, th...

6.1CVSS6.1AI score0.00286EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/14 12:06 a.m.•7 views

CVE-2026-27674 Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java)

Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java Web Dynpro Java, an unauthenticated attacker could supply crafted input that is interpreted by the application and causes it to reference attacker-controlled content. If a victim accesses the affected functionality, th...

6.1CVSS6.8AI score0.00286EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•28 views

Microsoft Windows 安全漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. The Microsoft Windows Client Side Caching driver csc.sys contains security vulnerabilities. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versio...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•8 views

CVE-2026-27316: Insufficiently Protected Credentials

A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection...

2.7CVSS5.6AI score0.00299EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•36 views

PT-2026-32753

Name of the Vulnerable Software and Affected Versions Windows Client Side Caching driver csc.sys affected versions not specified Description A heap-based buffer overflow in the Windows Client Side Caching driver csc.sys allows an authorized attacker to elevate privileges locally. A heap-based...

7.8CVSS7.8AI score0.00333EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•22 views

PT-2026-32679

A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection...

2.7CVSS5.8AI score0.00299EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•5 views

CVE-2026-26176: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Client Side Caching driver csc.sys allows an authorized attacker to elevate privileges locally...

7.8CVSS7.4AI score0.00333EPSS
SaveExploits0References2
Fortinet
Fortinet
•added 2026/04/14 12:00 a.m.•20 views

Credential disclosure in LDAP configuration web page.

...

2.7CVSS5.4AI score0.00299EPSS
SaveExploits0
Rows per page
Query Builder