44201 matches found
PT-2026-112500
Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use-after-free condition in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...
PT-2026-112922
Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use-after-free condition in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...
PT-2026-112921
Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use-after-free condition in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...
Cisco Secure Workload protection Multi-cloud Data Centers Compromise Data Compromise
The vulnerability of the Cisco Secure Workload protection mechanism for multi-cloud data centers previously known as Tetration is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected...
PT-2026-111133
Name of the Vulnerable Software and Affected Versions SAP/cloud-security-services-integration-library affected versions not specified Description The HybridTokenAuthenticator component accepts tokens from unintended ambient IAS/XSUAA bindings. This allows an attacker to gain unauthorized access t...
PT-2026-111313
Name of the Vulnerable Software and Affected Versions AssetView affected versions not specified AssetView CLOUD affected versions not specified AssetView Cloud + affected versions not specified Description An incorrect permission assignment for critical resources allows a local authenticated...
PT-2026-111127
Name of the Vulnerable Software and Affected Versions SAP Cloud Connector affected versions not specified Description An improper authorization check allows a low-privileged attacker on an adjacent network to obtain limited information about internal systems by sending specially crafted requests...
Microsoft Windows: CVE-2026-88106: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
PT-2026-111140
Name of the Vulnerable Software and Affected Versions SAP Commerce Cloud affected versions not specified Description Insufficient validation of user-supplied input before its incorporation into a database query allows an authenticated user to inject arbitrary SQL commands. This could enable the...
PT-2026-111138
Name of the Vulnerable Software and Affected Versions sap-cloud-sdk versions prior to 0.45.2 Description The SAP Cloud SDK for Python contains a Server-Side Request Forgery SSRF issue affecting multi-tenant SAP Business Technology Platform BTP applications. An attacker who controls the tenant...
CVE-2026-89113: Improper Neutralization of Special Elements used in an SQL Command
SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query. An authenticated user could send specially crafted requests to affected functionality to inject arbitrary SQL commands. Successful exploitation could allow the user to...
CVE-2026-89111: Server-Side Request Forgery (SSRF)
The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenantsubdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated...
Microsoft Windows: CVE-2026-83696: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-83696: Use After Free
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-106035: Insertion of Sensitive Information into Log File
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log...
CVE-2026-44414: Path Traversal: '.../...//'
A vulnerability has been identified in Industrial Edge Cloud Device IECD, Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge Device Kit - arm64 V1.12, Industrial Edge Device Kit - arm64 V1.13, Industrial Edge Device Kit - arm64 V1.14, Industrial Ed...
CVE-2026-110107: Authorization Bypass Through User-Controlled Key
RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' social login bindings by supplying their socialId. Attackers can send DELETE /auth/unlock/socialId, which deletes syssocial rows by primary key without...
PT-2026-111377
Name of the Vulnerable Software and Affected Versions Industrial Edge Cloud Device affected versions not specified Industrial Edge Device Kit - arm64 versions 1.5 through 1.28 Industrial Edge Device Kit - x86-64 versions 1.5 through 1.28 Industrial Edge Own Device affected versions not specified...
CVE-2026-84418
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API...