CVE-2025-49011: Improperly Implemented Security Check for Standard

SpiceDB is an open source database for storing and querying fine-grained authorization data. Prior to version 1.44.2, on schemas involving arrows with caveats on the arrow’ed relation, when the path to resolve a CheckPermission request involves the evaluation of multiple caveated branches, reques...

CVE-2020-1949

Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles and are vulnerable to reflected XSS attacks...

PT-2025-21949 · WordPress · Wp Image Mask

Name of the Vulnerable Software and Affected Versions: WP Image Mask versions through 3.1.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker could potential...

CVE-2025-30394: Sensitive Data Storage in Improperly Locked Memory

Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network...

CVE-2025-27484

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over a network...

CVE-2025-26686

Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network...

CVE-2025-26648

Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally...

Windows TCP/IP Remote Code Execution Vulnerability

Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network...

PT-2025-15507

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue concerns sensitive data storage in improperly locked memory, which can be exploited by an authorized attacker to elevate privileges locally. This allows attackers to affect the...

CVE-2025-27471: Sensitive Data Storage in Improperly Locked Memory

Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service over a network...

CVE-2025-26686: Sensitive Data Storage in Improperly Locked Memory

Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network...

CVE-2025-27475: Sensitive Data Storage in Improperly Locked Memory

Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2025-26665: Sensitive Data Storage in Improperly Locked Memory

Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally...

CVE-2025-27732: Sensitive Data Storage in Improperly Locked Memory

Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

CVE-2025-27482: Sensitive Data Storage in Improperly Locked Memory

Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

CVE-2025-27484: Sensitive Data Storage in Improperly Locked Memory

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over a network...

CVE-2025-26648: Sensitive Data Storage in Improperly Locked Memory

Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-31865: Missing Authorization

Missing Authorization vulnerability in CartBoss CartBoss cartboss allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CartBoss: from n/a through = 4.1.2...

CVE-2025-31674

The drupal/core content management platform is vulnerable to Object Injection due to an Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in DisplayPluginCollection.php. This flaw allows attackers to inject and manipulate unintended PHP objects within th...

CVE-2025-31674: Improperly Controlled Modification of Dynamically-Determined Object Attributes

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3...