8681 matches found
SolarWinds Serv-U Authentication Bypass
The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the account...
SolarWinds Serv-U Privilege Escalation
The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an attacker, operating remotely, to elevate their privileges to that of a system...
SolarWinds Serv-U Authentication Bypass Code Execution
The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code as the root user...
SolarWinds Serv-U Authentication Bypass Code Execution
The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor to elevate their privileges and execute arbitrary code as the root...
CVE-2026-78462
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-78462
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-69395
Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...
CVE-2026-69375
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...
EUVD-2026-73811
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-78462
CVE-2026-78462 is an authorization bypass through a user-controlled key in Visual Studio Code that allows an unauthenticated network attacker to bypass a security feature . The underlying weakness is the use of a user-controllable key in an authorization check, enabling remote exploitation with l...
CVE-2026-69375
CVE-2026-69375 is an authorization bypass through user-controlled key vulnerability in Microsoft Exchange Server that allows an authorized attacker to perform tampering over a network. The vulnerability carries a CVSS 3.1 score of 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N ...
EUVD-2026-73127
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...
Visual Studio Code Security Feature Bypass Vulnerability
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
Microsoft Exchange Server Tampering Vulnerability
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...
Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability
Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...
Azure Cosmos DB Spoofing Vulnerability
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network...
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-80219
CVE-2026-80219 was rejected by Red Hat Product Security as "not needed," yet the underlying flaw is well documented in the hawtio-operator for OpenShift. When Hawtio is deployed in cluster mode, the operator creates a cluster-scoped OAuthClient with automatic grant approval (GrantMethod: auto) an...
Security update for wget
This update for wget fixes the following issue: CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE bsc1276962. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...