22570 matches found
UBUNTU-CVE-2026-19547
Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...
CVE-2026-19547 Local Privilege Escalation in Ghostscript for Windows
Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...
CVE-2026-19547
Ghostscript for Windows is vulnerable to local privilege escalation via PostScript resource file hijacking. The application searches for files in predictable paths under **C:\gs*, which do not exist by default. Because Windows default ACLs allow authenticated users to create directories at the ro...
EUVD-2026-88701
Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...
CVE-2026-19547 Local Privilege Escalation in Ghostscript for Windows
Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...
CVE-2026-76719
A security vulnerability exists in HPE OneView and HPE Synergy Composer (prior to v11.40 ) that may be exploited remotely. The vulnerability allows for Cross-Site Scripting (XSS) and URL Redirection , which can lead to session hijacking , data theft , or other unauthorized actions. The CVSS v3.1 ...
CVE-2026-76719 HPE OneView - Cross-site scripting vulnerability
A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...
CVE-2026-76719 HPE OneView - Cross-site scripting vulnerability
A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...
EUVD-2026-88698
A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...
CVE-2026-76718 HPE OneView - Cross-site scripting vulnerability
A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions...
CVE-2026-76718 HPE OneView - Cross-site scripting vulnerability
A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions...
CVE-2026-76718
A security vulnerability exists in HPE OneView (prior to v11.40 ) and HPE Synergy Composer (prior to v11.40 ), categorized as a Cross-Site Scripting (XSS) and URL Redirection issue. The flaw can be exploited remotely to facilitate remote session hijacking or other unauthorized actions. To remedia...
EUVD-2026-88693
A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions...
CVE-2026-101268: Session Fixation
If an attacker is able to convince a victim on a specially crafted link, the victim is logged in to the attacker's customer account. If the victim does not notice this, this might lead to their order details being stored into the attacker's account. The attack only works when the event is availab...
CVE-2026-76719: Improper Neutralization of Input During Web Page Generation
A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...
CVE-2026-19547: Untrusted Search Path
Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...
CVE-2026-76718: Improper Neutralization of Input During Web Page Generation
A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions...
PT-2026-102793
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The issue involves an FTP passive data connection that is not bound to the authenticated control peer, which could allow an unauthorized party to intercept or...