7779 matches found
The vulnerability of the SolarWinds Serv-U secure file sharing and transmission software, related to bypassing authentication using a user-controlled key, allows attackers to elevate their privileges to the level of system administrators.
The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an attacker, operating remotely, to elevate their privileges to that of a system...
The vulnerability of the Microsoft Azure Active Directory B2C access and identity management service allows attackers to bypass authentication by using a user-controlled key, enabling them to escalate their privileges.
The vulnerability of the Microsoft Azure Active Directory B2C access and identity management service relates to the bypassing of authentication processes by using a user-controlled key. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...
The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication by using a user-controlled key, enabling them to execute arbitrary code.
The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code as the root user...
The vulnerability in the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication using a user-controlled key, enabling them to escalate their privileges and gain unauthorized access to protected information.
The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an intruder to enhance their privileges and gain unauthorized access to protected...
CVE-2026-78462
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-78462
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-69395
Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...
CVE-2026-69375
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...
CVE-2026-78462
CVE-2026-78462 is an authorization bypass through a user-controlled key in Visual Studio Code that allows an unauthenticated network attacker to bypass a security feature . The underlying weakness is the use of a user-controllable key in an authorization check, enabling remote exploitation with l...
EUVD-2026-73811
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
EUVD-2026-73127
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...
CVE-2026-69375
CVE-2026-69375 is an authorization bypass through user-controlled key vulnerability in Microsoft Exchange Server that allows an authorized attacker to perform tampering over a network. The vulnerability carries a CVSS 3.1 score of 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N ...
Microsoft Exchange Server Tampering Vulnerability
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...
Azure Cosmos DB Spoofing Vulnerability
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network...
Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability
Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...
Visual Studio Code Security Feature Bypass Vulnerability
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-80219
CVE-2026-80219 was rejected by Red Hat Product Security as "not needed," yet the underlying flaw is well documented in the hawtio-operator for OpenShift. When Hawtio is deployed in cluster mode, the operator creates a cluster-scoped OAuthClient with automatic grant approval (GrantMethod: auto) an...
Security update for wget
This update for wget fixes the following issue: CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE bsc1276962. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...