24809 matches found
CVE-2026-34348 Windows Event Logging Service Information Disclosure Vulnerability
...
CVE-2026-34348
CVE-2026-34348 affects the Windows Event Logging Service. The issue is a protection mechanism failure that can allow an authorized attacker to disclose information over a network. According to the available records, the exploit surface is network-based with low privileges required and no user int...
CVE-2026-34348 Windows Event Logging Service Information Disclosure Vulnerability
...
CVE-2026-15696
creationtimestamp| type| source ---|---|--- 2026-07-14 16:06:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmllzp5fa25 2026-07-22 04:39:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7ixjgjm62j...
BIT-PARSE-2026-57480 Parse Server: Denial of service via exponential-time processing of deeply nested query operators
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.9.1 and 8.6.82, deeply nested $or, $and, and $nor query condition operators in the REST API or LiveQuery query handling could trigger exponential-time processing in the internal...
CVE-2026-60119
Hi.Events through v1.10.0-beta contains an XSS vulnerability in the event title handling. An authenticated user with event creation/edit privileges can inject HTML/JavaScript by placing a malicious title containing , which is not escaped by JSON.stringify when embedded in inline script data. This...
CVE-2026-60119 Hi.Events < 1.11.0 XSS via Event Title JSON.stringify Injection
Hi.Events before 1.11.0 contains a cross-site scripting vulnerability that allows authenticated attackers with event creation or edit permissions to inject arbitrary HTML and JavaScript by embedding a malicious event title containing the sequence, which is not escaped by JSON.stringify when...
CVE-2026-53410
creationtimestamp| type| source ---|---|--- 2026-07-14 15:28:41+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mqmjicwo2y2e 2026-07-14 16:45:10+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-zoom-2 2026-07-16 14:23:57+00:00| seen|...
CVE-2026-12707
CVE-2026-12707 affects Cloudflare quiche. After QUIC handshakes, an attacker can trigger unbounded queuing of PathEvent::ReusedSourceConnectionId during rapid source address migration, causing memory resource exhaustion. Affected component is quiche’s PathEvents collection (path_event_next() drai...
CVE-2026-15697
CVE-2026-15697 affects the svgdotjs svg.js library (up to v3.2.5). The vulnerability is in the EventTarget.on function, enabling manipulation that leads to improperly controlled modification of object prototype attributes (prototype pollution). It is described as exploitable remotely with a repor...
CVE-2026-15697 svgdotjs svg.js npm Package API EventTarget.on prototype pollution
A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/svg.js of the component npm Package API. Performing a manipulation results in improperly controlled modification of object prototype attributes. The attack may be initiated...
CVE-2026-15697 svgdotjs svg.js npm Package API EventTarget.on prototype pollution
A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/svg.js of the component npm Package API. Performing a manipulation results in improperly controlled modification of object prototype attributes. The attack may be initiated...
CVE-2026-52533
creationtimestamp| type| source ---|---|--- 2026-07-14 14:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmhdbr2fk2t 2026-08-13 15:50:13+00:00| seen| https://bsky.app/profile/zuh.re/post/3msxyofhvsc24 2026-08-16 10:41:28+00:00| seen|...
Windows Event Logging Service Remote Code Execution Vulnerability
Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network...
Windows Event Logging Service Information Disclosure Vulnerability
Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network...
CVE-2026-15678
creationtimestamp| type| source ---|---|--- 2026-07-14 10:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlx4rhw3f2t 2026-07-19 20:28:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmkpfopr2m...
CVE-2026-15626
creationtimestamp| type| source ---|---|--- 2026-07-14 05:57:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqljkqzsov2w 2026-07-19 20:26:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmib3x532j...
CVE-2026-45196
creationtimestamp| type| source ---|---|--- 2026-07-14 04:14:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqldrwg3wj26 2026-07-16 08:22:17+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqslpaf742y...
CVE-2026-15622
creationtimestamp| type| source ---|---|--- 2026-07-14 01:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql32izw6q2t 2026-07-19 20:29:16+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqzmmfr4ff2y...