PT-2026-112944

Name of the Vulnerable Software and Affected Versions Azure Key Vault affected versions not specified Description An origin validation error allows an unauthorized attacker to disclose information over a network. Origin validation is a security mechanism used to verify that a request comes from a...

PT-2026-112307

Name of the Vulnerable Software and Affected Versions Microsoft Power Apps affected versions not specified Description An origin validation error allows an authorized attacker to execute code over a network. Origin validation is a security mechanism used to verify that a request originates from a...

Microsoft Windows: CVE-2026-69387: Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-112090

Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network...

CVE-2026-96238

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-88132: Origin Validation Error

Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network...

CVE-2026-69877: Origin Validation Error

Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network...

CVE-2026-70213: Origin Validation Error

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network...

CVE-2026-85354: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-83916: Double Free

Double free in Windows Error Reporting allows an authorized attacker to execute code locally...

CVE-2026-85800: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69387: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2023-54407

Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to view secrets stored in local variables captured in tracebacks. Attackers who can read error logs can extract plaintext secrets such as credentials or keys exposed in traceback...

CVE-2021-41647

CVE-2021-41647 CVE-2021-41647 SQL Injection in Online-Food-Ordering-Web-App The Online-Food-Ordering-Web-App is vulnerable to un-authenticated error and time-based blind SQL Injection attacks. The username parameter on the /login.php page does not sanitize the user input, an attacker is able to...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for September 2026.

Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the Data Insight DI component with a Service Pack update. Please understand that the new use of security bulletins represents a change in our communication process, not an increase in security...

CVE-2023-54407

The Frappe software, versions 14.x before 14.45.0 , is vulnerable to an information disclosure flaw due to how it handles error log tracebacks . If a user has access to the error logs, they can view traceback local variables , which may contain plaintext secrets such as credentials or keys. No sp...

CVE-2023-54407 Frappe 14.x before 14.45.0 Information Disclosure via Error Log Tracebacks

Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to view secrets stored in local variables captured in tracebacks. Attackers who can read error logs can extract plaintext secrets such as credentials or keys exposed in traceback...

CVE-2023-54407 Frappe 14.x before 14.45.0 Information Disclosure via Error Log Tracebacks

Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to view secrets stored in local variables captured in tracebacks. Attackers who can read error logs can extract plaintext secrets such as credentials or keys exposed in traceback...

CVE-2026-103658

A flaw was found in Aspell. An attacker could achieve arbitrary code execution or cause a Denial of Service DoS by convincing a user to process a specially crafted dictionary file. This issue occurs due to an integer calculation error during buffer capacity checks in the read-only dictionary...

kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership()

A flaw was found in the Linux kernel's iouring/poll component. A logic error exists in the iopollgetownership function due to an incorrect signed comparison. This flaw prevents the necessary slowpath from being triggered when the IOPOLLCANCELFLAG is set, potentially leading to unexpected behavior...