311730 matches found
CVE-2026-24301
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
Microsoft Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-75832
creationtimestamp| type| source ---|---|--- 2026-08-18 13:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mteec6zzp323 2026-08-18 14:07:44+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtefbrptnq2y...
MINI-462X-Q42W-6FV6
Bulletin has no description...
MINI-P342-3R8H-MHC5
Bulletin has no description...
MINI-M5W2-FXPH-QC2W
Bulletin has no description...
MINI-6W6H-G548-H3MF
Bulletin has no description...
MINI-589Q-PR3P-PJ38
Bulletin has no description...
MINI-7XMF-RX2M-HCMV
Bulletin has no description...
CVE-2026-72441
A flaw was found in the Linux kernel's IEEE 802.15.4 Wireless Personal Area Networks networking component. This vulnerability allows a local user to expose sensitive kernel memory. The issue arises because a specific field panid in a network address structure is not properly cleared, leading to...
CVE-2026-72426
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The cleanfuncstate function, which manages stack slot cleanup, incorrectly clears metadata for pointer spills. This allows a subsequent read from a partially live stack slot to bypass crucial non-scalar register-fill...
CVE-2026-72150
A flaw was found in the Linux kernel's sunrpc component. The xprtcreateargs structure is allocated on the stack without initialization in rpcsysfsxprtswitchaddxprtstore. This can lead to critical fields containing uninitialized stack garbage. Exploiting this vulnerability can result in a kernel...
EUVD-2026-60762
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-24301 Microsoft Copilot Information Disclosure Vulnerability
...
CVE-2026-24301 Microsoft Copilot Information Disclosure Vulnerability
...
CVE-2026-24301
Microsoft Copilot has an improper neutralization of special elements used in a command (command injection ) flaw. A network-based, unauthenticated attacker with user interaction can disclose information. CVSS 3.1 scores 8.8 HIGH (C:H/I:H/A:H). No in-the-wild exploitation or patch version is docum...
CVE-2026-74971
Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...
CVE-2026-74972
Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...