144008 matches found
Pallets Werkzeug <0.15.5 - Local File Inclusion
Pallets Werkzeug before 0.15.5 is susceptible to local file inclusion because SharedDataMiddleware mishandles drive names such as C: in Windows pathnames. id: CVE-2019-14322 info: name: Pallets Werkzeug 0.15.5 - Local File Inclusion author: madrobot severity: high description: | Pallets Werkzeug...
HCL Traveler for Microsoft Outlook < 3.0.16 DLL Hijacking (CVE-2026-21770)
The version of HCL Traveler for Microsoft Outlook HTMO installed on the remote host is prior to 3.0.16. It is, therefore, affected by a DLL hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content. Note that Nessus has not tested for this...
CLEANSTART-2026-RW79431 Security fixes in velero-plugin-for-microsoft-azure-fips 1.14.0-r1
Package velero-plugin-for-microsoft-azure-fips version 1.14.0-r1 fixes 9 vulnerabilities: CVE-2026-27143, CVE-2026-32281, CVE-2026-32280, CVE-2026-32283, CVE-2026-27140...
CLEANSTART-2026-RE00985 Security fixes in velero-plugin-for-microsoft-azure-fips 1.14.0-r2
Package velero-plugin-for-microsoft-azure-fips version 1.14.0-r2 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...
Microsoft SharePoint Server - Remote Code Execution (ToolShell)
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. This vulnerability is part of the ToolShell exploit chain and when combined with CVE-2025-53771 authentication bypass, enables unauthenticated remote code...
Microsoft SharePoint - Authentication Bypass
Microsoft SharePoint Server Elevation of Privilege Vulnerability id: CVE-2023-29357 info: name: Microsoft SharePoint - Authentication Bypass author: pdteam severity: critical description: | Microsoft SharePoint Server Elevation of Privilege Vulnerability impact: | Unauthenticated attackers can...
Security Updates for Microsoft Malware Protection Engine (July 2026)
The Microsoft Malware Protection Engine installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Integer underflow wrap or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally. CVE-2026-55011 - Integ...
Chromium: CVE-2026-15126 Use after free in Forms
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15117 Use after free in Payments
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-62828
Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network...
CVE-2026-62828 Microsoft Edge for Android (Chromium-based) Tampering Vulnerability
...
Chromium: CVE-2026-15767 Heap buffer overflow in libyuv
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
PT-2026-65516
Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network...
BIT-DOTNET-2026-47300 ASP.NET Core Elevation of Privilege Vulnerability
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
Microsoft SharePoint Server - Authentication Bypass
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. id: CVE-2025-49706 info: name: Microsoft SharePoint Server - Authentication Bypass author: daffainfo severity: medium description: | Improper authentication in Microsoft Offi...
PT-2026-65020
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
CVE-2026-57990
Files or directories accessible to external parties in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
Exploit for Improper Authorization in Microsoft
Certighost Slidev deck This directory contains the Slidev pre...
