77986 matches found
CVE-2025-20096
CVE-2025-20096 involves improper input validation in the UEFI firmware for some Intel Reference Platforms, allowing escalation of privilege. The Red Hat, NVD, Intel advisory and EUVD records describe local access, high attack requirements, and user interaction as prerequisites, with potential imp...
Microsoft Patch Tuesday for March 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for March 2026 which includes 79 vulnerabilities, including three that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." Microsoft assessed that exploitation of the three "critical" vulnerabilitie...
EUVD-2025-208532
In hypalloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-36920
In hypalloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-36920
In hypalloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-36920
CVE-2025-36920 describes an out-of-bounds write in the kernel component arch/arm64/kvm/hyp/nvhe/alloc.c’s hyp_alloc function caused by insufficient input validation. The vulnerability enables local escalation of privilege without requiring additional execution privileges, and exploitation reporte...
CVE-2025-36227
CVE-2025-36227 — IBM Aspera Faspex : The issue affects Faspex 5.0.0–5.0.14.3, caused by improper validation of input in HOST headers, leading to HTTP header injection. Documented impacts include cross-site scripting, cache poisoning, and session hijacking. Affected products are IBM Aspera Faspex ...
EUVD-2026-10683
Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-10684
Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-10670
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
EUVD-2026-10669
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
EUVD-2026-10649
Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
EUVD-2026-10567
Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network...
EUVD-2026-10568
Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network...
EUVD-2026-10440
Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthenticated attacker to inject specially crafted input which upon user interaction could result in a DOM-based Cross-Site Scripting XSS vulnerability. This issue ha...
EUVD-2026-10441
Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthenticated attacker to inject specially crafted input which upon user interaction could result in a DOM-based Cross-Site Scripting XSS vulnerability. This issue ha...
CVE-2026-30960
rssn is a scientific computing library for Rust, combining a high-performance symbolic computation engine with numerical methods support and physics simulations functionalities. The vulnerability exists in the JIT Just-In-Time compilation engine, which is fully exposed via the CFFI Foreign Functi...
CVE-2026-26115
Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network...
