Lucene search
+L

61179 matches found

OSV
OSV
added 2026/07/14 7:40 p.m.9 views

GHSA-28XV-PH75-77WH Prototype pollution in @feathersjs/commons _.merge via JSON-parsed __proto__

Impact The .mergetarget, source utility exported by @feathersjs/commons recursively merges source into target by iterating Object.keyssource. When source was produced by JSON.parse and contains a proto or constructor / prototype key, that key is returned as an own-enumerable property. The recursi...

3.7CVSS6.1AI score0.00259EPSS
SaveExploits0References5
CVE
CVE
added 2026/07/14 7:20 p.m.30 views

CVE-2026-48252

Adobe Experience Manager is affected by CVE-2026-48252 (Missing Authentication for Critical Function, CWE-306). An attacker could bypass security measures and gain unauthorized write access without user interaction. The vulnerability has a CVSS v3.1 score of 8.6 (Network, Low attack complexity, N...

8.6CVSS6.1AI score0.00371EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
added 2026/07/14 6:49 p.m.5 views

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the apply function. An attacker can cause memory corruption and potentially crash the application by providing an output image with a mode that does not match the transform's declared output mode. Remediation...

8.7CVSS6.1AI score0.00385EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/07/14 6:32 p.m.15 views

EUVD-2026-44043

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network...

9.8CVSS6.1AI score0.22439EPSS
SaveExploits1References2
NVD
NVD
added 2026/07/14 6:18 p.m.9 views

CVE-2026-57093

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7.8CVSS0.0026EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/07/14 6:3 p.m.10 views

Missing Synchronization

Overview Affected versions of this package are vulnerable to Missing Synchronization in the AddDiff function when running in Diff mode, which writes to the shared responsesDiff map without synchronization. An attacker can cause the process to crash and become unavailable by sending multiple...

8.7CVSS5.3AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/07/14 6:3 p.m.11 views

Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode

Summary: When Hoverfly is running in Diff mode, the AddDiff function writes to the shared responsesDiff map without any synchronization no mutex. When multiple proxy requests are processed concurrently the normal case for any proxy, the concurrent map writes trigger Go's built-in race detector...

6.1AI score
SaveExploits0References4Affected Software1
NVD
NVD
added 2026/07/14 5:17 p.m.13 views

CVE-2026-57969

Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

8.8CVSS0.00526EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/14 5:16 p.m.13 views

CVE-2026-34346

Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally...

5.5CVSS0.00202EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/14 5:9 p.m.21 views

CVE-2026-57093

CVE-2026-57093 – Windows Ancillary Function Driver for WinSock is a reported use-after-free vulnerability in the WinSock ancillary function driver that can be exploited locally to achieve privilege escalation. The issue affects the specific Windows driver handling WinSock operations; successful e...

7.8CVSS6AI score0.0026EPSS
SaveExploits0References1Affected Software12
Vulnrichment
Vulnrichment
added 2026/07/14 5:9 p.m.21 views

CVE-2026-57093 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

7CVSS6.1AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/14 5:9 p.m.46 views

CVE-2026-57093 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

7CVSS0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/14 5:7 p.m.10 views

CVE-2026-50462 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

7.8CVSS6.1AI score0.00392EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/14 5:7 p.m.29 views

CVE-2026-50462

CVE-2026-50462 affects the Windows Ancillary Function Driver for WinSock. The disclosed issue is external control of a file name or path, enabling an authorized attacker to elevate privileges locally (local privilege escalation). CVSS v3.1 score is 7.8 (High) with Privileges: Low, User Interactio...

7.8CVSS6AI score0.00392EPSS
SaveExploits0References1Affected Software12
Cvelist
Cvelist
added 2026/07/14 5:7 p.m.39 views

CVE-2026-50462 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

7.8CVSS0.00392EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/14 5:6 p.m.28 views

CVE-2026-50312

CVE-2026-50312 is a Windows Ancillary Function Driver for WinSock use-after-free vulnerability that enables local privilege escalation when exploited. The initial description and connected sources confirm the affected component and root cause, and indicate the impact is elevation of privileges fo...

7.8CVSS6AI score0.00327EPSS
SaveExploits0References1Affected Software12
Vulnrichment
Vulnrichment
added 2026/07/14 5:6 p.m.10 views

CVE-2026-50312 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

4.7CVSS6.1AI score0.00327EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/14 5:6 p.m.34 views

CVE-2026-50312 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

4.7CVSS0.00327EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/14 5:5 p.m.57 views

CVE-2026-57969

Technical details (affected versions, root cause, exploit vectors) are not publicly available in the provided documents. Monitor for updates from official sources and CVE records.

8.8CVSS6.1AI score0.00526EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/07/14 5:4 p.m.35 views

CVE-2026-49174

CVE-2026-49174 describes a vulnerability in Microsoft Windows DNS where missing authentication for a critical function could allow a locally authorized attacker to tamper with DNS behavior. The NVD entry notes a CVSS v3.1 base score of 6.1 (Medium) with a LOCAL attack vector, LOW attack complexit...

6.1CVSS6AI score0.00198EPSS
SaveExploits0References1Affected Software9
Rows per page
Query Builder