148649 matches found
CVE-2026-38450
An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitrary code via the name and description parameter of the Add/Update Project function...
CVE-2026-15410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
CVE-2026-15410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
CVE-2026-5040
TP-Link Deco M5 v1 uses a weak password hashing mechanism to store user credentials. An attacker who obtains the password hash through system compromise or privileged access could perform brute-force or dictionary attacks. Successful exploitation may result in disclosure of authentication...
CVE-2026-58544
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-5040 Weak Password Hashing Mechanism in TP-Link Deco M5
TP-Link Deco M5 v1 uses a weak password hashing mechanism to store user credentials. An attacker who obtains the password hash through system compromise or privileged access could perform brute-force or dictionary attacks. Successful exploitation may result in disclosure of authentication...
CVE-2026-5040
The CVE-2026-5040 entry applies to TP-Link Deco M5 v1. The issue stems from a weak password hashing mechanism used to store user credentials. An attacker who obtains the password hash via system compromise or privileged access could perform brute-force or dictionary attacks. Practical consequence...
CVE-2026-50295
Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally...
CVE-2026-58543 Universal Print Management Service Elevation of Privilege Vulnerability
...
CVE-2026-58543 Universal Print Management Service Elevation of Privilege Vulnerability
...
CVE-2026-58543
CVE-2026-58543 corresponds to a race condition in the Windows USB Print Driver (shared resource synchronization) that can allow an authorized attacker with physical access to elevate privileges. The NVD entry states concurrent execution with improper synchronization in the Windows USB Print Drive...
CVE-2026-58544
CVE-2026-58544 (Windows Management Services) is a use-after-free vulnerability that enables local privilege escalation by an authorized user. Public references in the initial data indicate an elevated-privilege impact (CVE-2026-58544) with a CVSS v3.1 base score of 7.0 (LOCAL, HIGH impact to conf...
CVE-2026-58544 Windows Management Services Elevation of Privilege Vulnerability
...
CVE-2026-58544 Windows Management Services Elevation of Privilege Vulnerability
...
CVE-2026-50496 Windows Network Policy Server SNMP Information Disclosure Vulnerability
...
CVE-2026-50496
CVE-2026-50496 is an out-of-bounds read vulnerability in Windows Network Policy Server SNMP that allows an unauthenticated attacker to disclose information over the network. Affects the SNMP component of Windows NPS; impact is information disclosure with a CVSS v3.1 base score of 7.5 (Network att...
CVE-2026-50470
CVE-2026-50470 describes an out-of-bounds read in Windows Network Policy Server SNMP that could let an unauthenticated attacker disclose information over the network. The vulnerability affects the NPS SNMP handling and has a CVSS v3.1 base score of 7.5 (High) with network attack vector, low attac...
CVE-2026-50470 Windows Network Policy Server SNMP Information Disclosure Vulnerability
...