162926 matches found
CVE-2026-95394
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-95394
A large loop vulnerability exists in the Microsoft Network Monitor file parser within Wireshark versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 . This issue is caused by unchecked input for loop conditions , which can be exploited to cause a denial of service (DoS) . To remediate this, users should u...
CVE-2026-95394 Unchecked Input for Loop Condition in Wireshark
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
Humans are reviewing Copilot users’ bizarre and abusive image-editing requests
A reminder for anyone who thinks their AI chats are private: A human may see what they upload. A report from 404 Media this week describes contractors reviewing Copilot users’ photos, editing requests, and the images Copilot produces. Some of what they see is disturbing. The third-party companies...
Lessons from Microsoft Patch KB5002907: Two Layers of Patch Control in Qualys TruRisk Eliminate
How reliability scoring keeps risky patches out of zero-touch jobs, and how one blocking rule stops a paused update across your environment. Executive Summary Microsoft has paused the rollout of KB5002907, an optional Microsoft 365 Apps update that left some Office 2016 and Office 2019...
VulnCheck KEV: CVE-2023-54400
Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated remote attackers to inject arbitrary SQL through the Name parameter of the getEmpByname action without any authentication. Attackers can exploit UNION-based SQL injection...
CVE-2026-93853: Unverified Ownership
Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...
CVE-2023-54400: Improper Neutralization of Special Elements used in an SQL Command
Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated remote attackers to inject arbitrary SQL through the Name parameter of the getEmpByname action without any authentication. Attackers can exploit UNION-based SQL injection...
PT-2026-102632
Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated remote attackers to inject arbitrary SQL through the Name parameter of the getEmpByname action without any authentication. Attackers can exploit UNION-based SQL injection...
PT-2026-102928
Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...
The vulnerability of the ToolPane.GetPartPreviewAndPropertiesFromMarkup() function in Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Server Subscription Edition packages allows a attacker to execute arbitrary code.
The vulnerability of the ToolPane.GetPartPreviewAndPropertiesFromMarkup function in Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Server Subscription Edition packages is related to improper code generation. Exploiting this vulnerability could allow ...
The vulnerability of the Microsoft Exchange Server mail server, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.
The vulnerability of Microsoft Exchange Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of Microsoft Exchange Server servers arises from the lack of protective measures for website structures, allowing attackers to carry out spear-phishing attacks.
The vulnerability of Microsoft Exchange Server servers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the Microsoft SQL Server Management Studio (SSMS) database management tool, related to the lack of measures taken to neutralize special elements, allows attackers to increase their privileges.
The vulnerability of the Microsoft SQL Server Management Studio SSMS management tool is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
CVE-2026-95394
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
Wireshark : CVE-2026-95394 : Microsoft Network Monitor file parser large loop
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-95394: Unchecked Input for Loop Condition
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
The vulnerability of Microsoft Visual Studio Code’s source editor, related to a flaw in its data protection mechanism, allows attackers to bypass existing security measures.
The vulnerability of Microsoft Visual Studio Code’s editor is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...
