14566 matches found
CVE-2022-50907
Affected software: e107 CMS 3.2.1. Issue: a file upload restriction bypass in the Media Manager import flow allows authenticated admin users to upload PHP files outside restricted locations, enabling remote code execution. Root cause: manipulation of the upload URL parameter enables placing malic...
Quill is vulnerable to XSS via HTML export feature
A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting XSS. This issue affects Quill: 2.0.3...
CVE-2026-20949
Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-20824
Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-20949
Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-20824 Windows Remote Assistance Security Feature Bypass Vulnerability
...
CVE-2026-20824 Windows Remote Assistance Security Feature Bypass Vulnerability
...
CVE-2026-20824
CVE-2026-20824 is a Windows Remote Assistance vulnerability described as a protection mechanism failure that enables a local attacker to circumvent a security measure. It is listed with a local attack vector, requiring user interaction, and a high confidentiality impact. Connected sources identif...
CVE-2026-21265 Secure Boot Certificate Expiration Security Feature Bypass Vulnerability
...
CVE-2026-21265 Secure Boot Certificate Expiration Security Feature Bypass Vulnerability
...
Description of the security update for SharePoint Server 2016 Language Pack: January 13, 2026 (KB5002827)
None None...
Secure Boot Certificate Expiration Security Feature Bypass Vulnerability
Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affected certificate versions must update them to maintain Secure Boot functionality and avoid compromising security by losing security fixes...
Description of the security update for SharePoint Server 2016: January 13, 2026 (KB5002828)
None None...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in Sync in Google Chrome prior to version 141.0.7390.65 allowed a remote attacker to perform an out-of-bounds memory read through a crafted HTML page. Chromium security severity: High...
BIT-GITLAB-2025-13781 Missing Authorization in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to modify instance-wide AI feature provider settings by exploiting missing authorization checks in GraphQL mutations...
PT-2026-2674
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A security feature bypass exists in Windows Remote Assistance. This allows an unauthorized attacker to bypass a security feature locally. The issue involves a failure in a protection mechanis...
MiracleLinux 8 : dotnet8.0-8.0.121-1.el8_10.ML.1 (AXSA:2025-10996:21)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10996:21 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET...
PT-2026-2749
CVE-2026-20949 Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally. https://t.co/ASZWOprilb...
CVE-2026-22805 Metabase channel test endpoint can reach internal local addresses
Metabase is an open-source data analytics platform. Prior to 55.13, 56.3, and 57.1, self-hosted Metabase instances that allow users to create subscriptions could be potentially impacted if their Metabase is colocated with other unsecured resources. This vulnerability is fixed in 55.13, 56.3, and...