CVE-2026-108065

SQL Injection CWE-89 in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce VERSION — missing allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID...

CVE-2026-108065 Unauthenticated SQL Injection in Channel Software WebAlliance eCommerce

SQL Injection CWE-89 in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce VERSION — missing allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID...

CVE-2026-108065

Channel Software WebAlliance eCommerce is vulnerable to an unauthenticated SQL Injection (CWE-89) within the SOAP GetUser method of the /preapproval.asmx endpoint. An attacker can exploit this by providing a crafted sUserID parameter containing a single quote and a stacked SQL query. This vulnera...

EUVD-2026-101025

SQL Injection CWE-89 in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce VERSION — missing allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID...

Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update

Microsoft addressed 1,413 security vulnerabilities in its October 2026 Patch Tuesday update, making it the company’s largest monthly…...

CVE-2026-87968

The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin, in versions before 5.3.2 , contains a vulnerability due to a missing nonce or capability check on an AJAX action. This flaw allows unauthenticated users to force a store re-regi...

EUVD-2026-100857

The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2 does not perform a nonce or capability check on the AJAX action that registers the store with its feed service and exposes it to unauthenticated users, so any visito...

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug

Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation. These include 1,102 flaws in Windows, 134 in Office, 61 in Developer Tools, 36 in SharePoint Server, and 22 in SQL...

Microsoft Exchange - Authentication Bypass

Microsoft Exchange Server Information Disclosure Vulnerability. This vulnerability enables an attacker to bypass authentication and gain access to the Exchange Server's internal. id: CVE-2021-33766 info: name: Microsoft Exchange - Authentication Bypass author: daffainfo severity: high description...

CVE-2026-97830

creationtimestamp| type| source ---|---|--- 2026-10-14 01:49:33+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25 2026-10-14 12:33:31+00:00| seen| https://infosec.exchange/users/cve/statuses/117439280620626161...

Security Updates for Microsoft OneNote Products C2R (October 2026)

The Microsoft OneNote Products are missing a security update. It is, therefore, affected by a use after free vulnerability in Microsoft Office OneNote that allows an authorized attacker to elevate privileges locally. CVE-2026-96997 Note that Nessus has not tested for this issue but has instead...

Security Updates for Microsoft Access Products C2R (October 2026)

The Microsoft Access Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. CVE-2026-102849, CVE-2026-102850, CVE-2026-105591,...

Security Updates for Microsoft Visio Products C2R (October 2026)

The Microsoft Visio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. CVE-2026-102855, CVE-2026-102856, CVE-2026-102857 Note that...

Security Updates for Microsoft Office Products C2R (October 2026)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. CVE-2026-88196, CVE-2026-88197 - Heap-based buffer overflow in Windo...

Security Updates for Microsoft PowerPoint Products C2R (October 2026)

The Microsoft PowerPoint Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-70215, CVE-2026-88178 - Heap-based buffer overflow in...

CSS components in Google Chrome and Microsoft Edge Information Disclosure

The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to insufficient elimination of specific elements in the request. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Controls Component Compromise Protected Information

The vulnerability of the Controls component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...

Extensions Component DoS

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ANGLE Component Protected Information Access

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to gain access to protected information through a specially created HTML page...

ANGLE Library Protected Information Access

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to gain access to protected information through a specially created HTML page...