38801 matches found
EUVD-2025-210818
A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device...
CVE-2025-12768
CVE-2025-12768 is an out-of-bounds write vulnerability in FactoryTalk® Historian Machine Edition (Rockwell Automation). An attacker with low-level authentication can exploit it to achieve remote code execution on the affected device. The CVSS 4.0 score is 8.6 (HIGH) , with an adjacent network att...
CVE-2025-12768 FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability
A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device...
CVE-2026-76111
Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrator-only operations, leading to privilege escalation...
CVE-2026-76111
Dell PowerStore is affected by an Incorrect Authorization vulnerability that allows an authenticated attacker with low privileges to invoke administrator-only operations, resulting in privilege escalation . The Dell-assigned CVSS v3.1 score is 8.8 (HIGH) with a vector of CVSS:3.1/AV:N/AC:L/PR:L/U...
EUVD-2026-69036
Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrator-only operations, leading to privilege escalation...
CVE-2026-76111
Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrator-only operations, leading to privilege escalation...
CVE-2026-80611
A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI processor idle functionality. When kernel tracing features, such as function tracing or Kprobes, are enabled, entering a Low Power Idle LPI state can trigger a Read-Copy Update RCU warning. This occurs because...
PT-2026-84471
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An authenticated low-privileged user can execute arbitrary commands as a privileged user on the underlying operating system through affected command-line...
PT-2026-84476
Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A privilege escalation issue exists in the API endpoint of AOS-CX. This allows an authenticated user with low privilege operator permissions to modify the state of specific system settings...
PT-2026-84350
Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description An incorrect authorization issue allows a low privileged attacker with remote access to potentially elevate their privileges. Recommendations At the moment, there is no information...
PT-2026-84404
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to...
PT-2026-84428
Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description Privilege escalation issues exist in the API of HPE Networking Fabric Composer. An authenticated user with low privilege operator permissions can exploit this to modify...
PT-2026-84392
Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Kibana contains a path traversal issue in its tag management interface. A low-privileged user with tag creation privileges can craft a tag that causes a subsequent administrative action in the...
Linux Distros Unpatched Vulnerability : CVE-2026-84125
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
PT-2026-84406
Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A privilege escalation issue exists in the API of HPE Networking Fabric Composer. An authenticated user with low privilege operator permissions can exploit this to gain...
PT-2026-84469
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An authenticated user with low-privileged access can execute arbitrary commands on the underlying operating system by submitting crafted input through the...
PT-2026-84427
Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A privilege escalation issue exists in the web-based management interface. This flaw allows an authenticated user with low-privilege operator permissions to perform...
PT-2026-84147
Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description An incorrect authorization issue allows an authenticated attacker with low privileges to invoke operations reserved for administrators, resulting in privilege escalation...
PT-2026-84412
Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A business logic vulnerability exists in the API of HPE Networking Fabric Composer. This flaw allows an authenticated user with low privilege operator permissions to...