234 matches found
Adobe ColdFusion - RDS Arbitrary File Write
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary code execution in the context of the current user. The RDS FILEIO WRITE operation allows unauthenticated...
CVE-2026-61355
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...
CVE-2026-61355
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-56616
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...
CVE-2026-61355 Windows Sensor Data Service Elevation of Privilege Vulnerability
...
CVE-2026-61355
A heap-based buffer overflow in Windows Sensor Data Service allows an authorized local attacker to elevate privileges. Affected component: Windows Sensor Data Service. Vulnerability type: heap-based overflow. Impact: elevated local privileges with high confidentiality, integrity, and availability...
CVE-2026-61355 Windows Sensor Data Service Elevation of Privilege Vulnerability
...
Windows Sensor Data Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...
PT-2026-70426
Name of the Vulnerable Software and Affected Versions Windows Sensor Data Service affected versions not specified Description A heap-based buffer overflow in the Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a...
CVE-2026-18854 Shandong Hoteam PDM Product Data Management System DataService GetStoredClassByFilter sql injection
A vulnerability has been found in Shandong Hoteam PDM Product Data Management System up to 8.3.10. The impacted element is the function GetStoredClassByFilter of the file /Base/BaseService.asmx/DataService. The manipulation of the argument FilterString leads to sql injection. Remote exploitation ...
CVE-2026-50183
WWBN AVideo is an open source video platform. Versions 29.0 and below contain a stored Cross-Site Scripting vulnerability in the YouTubeAPI plugin. The plugin renders the snippet.title field returned by the YouTube Data API into the homepage gallery markup with no HTML encoding. The title is set ...
CVE-2026-58619
Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...
CVE-2026-50367
Incorrect access of indexable resource 'range error' in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...
CVE-2026-58619 Windows Sensor Data Service Elevation of Privilege Vulnerability
...
CVE-2026-58619
CVE-2026-58619 is a Windows Sensor Data Service vulnerability described as a use-after-free that enables an authorized attacker to locally elevate privileges. The vulnerability is reported with CVSS 3.1: LOCAL attack vector, HIGH impact (C, I, A), and low privileges required with no user interact...
CVE-2026-58619 Windows Sensor Data Service Elevation of Privilege Vulnerability
...
CVE-2026-50367 Windows Sensor Data Service Elevation of Privilege Vulnerability
...
CVE-2026-50367
CVE-2026-50367 describes an elevation of privilege in the Windows Sensor Data Service due to a logic flaw: incorrect access of an indexable resource (a range error). An authenticated local attacker could exploit this to escalate privileges on the affected system. The vulnerability’s CVSS 3.1 vect...
Windows Sensor Data Service Elevation of Privilege Vulnerability
Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...
Windows Sensor Data Service Elevation of Privilege Vulnerability
Incorrect access of indexable resource 'range error' in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...