Microsoft SQL Server Privilege Escalation

The vulnerability of the Microsoft SQL Server database management system is related to deficiencies in access control mechanisms. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

Microsoft SQL Server Privilege Escalation

The vulnerability of the Microsoft SQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

Microsoft SQL Server Privilege Escalation

The vulnerability of the Microsoft SQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

PT-2026-107925

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

VulnCheck KEV: CVE-2015-3306

ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...

CVE-2026-11888: Improper Control of Generation of Code

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to an information disclosure attack...

PT-2026-107909

Name of the Vulnerable Software and Affected Versions AKINSOFT WOLVOX Control Panel versions 26.02.25 through 26.02.25 Description An issue exists where sensitive information is inserted into sent data, allowing the pulling of data from system resources. Recommendations Update AKINSOFT WOLVOX...

ProFTPD Improper Access Control Vulnerability

ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...

Anytime-Valid Detection of LLM Weight Exfiltration

A compromised LLM inference server can leak model weights by encoding payload bits in otherwise plausible token choices. A replay of the same prompt in a trusted server can expose such deviations, but benign numerical nondeterminism also causes token mismatches. Patient attackers can therefore hi...

CVE-2026-76282

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...

CVE-2026-76281

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...

Malware in function-flag

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2026-76282 Improper Control of a Resource Through its Lifetime in Splunk Enterprise

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...

CVE-2026-76282 Improper Control of a Resource Through its Lifetime in Splunk Enterprise

Improper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures...

CVE-2026-76282

Splunk Enterprise versions 10.4.3 , 10.2.7 , 10.0.10 , and 9.4.15 are affected by CVE-2026-76282 , which involves Improper Control of a Resource Through its Lifetime (CWE-664). Splunk addressed these internally identified vulnerabilities by grouping them by CWE and assigning specific identifiers ...

EUVD-2026-94634

Improper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures...

CVE-2026-76281 Improper Access Control in Splunk Enterprise

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...

CVE-2026-76281

Splunk Enterprise versions prior to 10.4.3 , 10.2.7 , 10.0.10 , and 9.4.15 are affected by CVE-2026-76281 , which involves improper access control issues (CWE-284). These vulnerabilities stem from insufficient authorization mechanisms, which may allow unauthorized users to access privileged funct...

EUVD-2026-94633

Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures CVE identifier assigned to...

CVE-2026-76281 Improper Access Control in Splunk Enterprise

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...