Lucene search
+L

7190 matches found

NVD
NVD
•added 2026/07/14 6:17 p.m.•25 views

CVE-2026-50451

Missing authentication for critical function in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00307EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/14 6:17 p.m.•28 views

CVE-2026-50444

Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...

8.8CVSS0.00778EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/14 5:17 p.m.•24 views

CVE-2026-57969

Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

8.8CVSS0.00778EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/14 5:16 p.m.•22 views

CVE-2026-50333

Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00298EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/14 5:16 p.m.•22 views

CVE-2026-49174

Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...

6.1CVSS0.0027EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/14 5:06 p.m.•18 views

CVE-2026-50333

Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00298EPSS
SaveExploits0References2Affected Software14
CVE
CVE
•added 2026/07/14 5:06 p.m.•68 views

CVE-2026-50333

CVE-2026-50333 affects Windows Spaceport.sys. The vulnerability is described as missing authentication for a critical function, enabling a locally authenticated attacker to escalate privileges. Affected component is Spaceport.sys; no specific product version, root cause detail, or remediation ver...

7.8CVSS5.8AI score0.00298EPSS
SaveExploits0References1Affected Software11
CVE
CVE
•added 2026/07/14 5:05 p.m.•86 views

CVE-2026-57969

Technical details (affected versions, root cause, exploit vectors) are not publicly available in the provided documents. Monitor for updates from official sources and CVE records.

8.8CVSS5.8AI score0.00778EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/07/14 5:05 p.m.•24 views

CVE-2026-56164

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network...

5.3CVSS6.1AI score0.01011EPSS
SaveExploits1References2Affected Software3
CVE
CVE
•added 2026/07/14 5:05 p.m.•730 views

CVE-2026-56164

CVE-2026-56164 is a Microsoft SharePoint Server elevation-of-privilege vulnerability described as missing authentication for a critical function, enabling a remote attacker to elevate privileges over a network. Public advisories indicate widespread Office-related vulnerabilities, with SharePoint ...

9.8CVSS6.4AI score0.01011EPSS
SaveIn wildExploits1References2Affected Software1
CVE
CVE
•added 2026/07/14 5:04 p.m.•88 views

CVE-2026-49174

CVE-2026-49174 describes a vulnerability in Microsoft Windows DNS where missing authentication for a critical function could allow a locally authorized attacker to tamper with DNS behavior. The NVD entry notes a CVSS v3.1 base score of 6.1 (Medium) with a LOCAL attack vector, LOW attack complexit...

6.1CVSS5.8AI score0.0027EPSS
SaveExploits0References1Affected Software9
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•71 views

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.9AI score0.00778EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•30 views

Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00307EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•58 views

Windows Spaceport.sys Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00298EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•40 views

Azure CycleCloud Elevation of Privilege Vulnerability

Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.00778EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•56 views

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network...

9.8CVSS6.3AI score0.01011EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•33 views

DNS Client Tampering Vulnerability

Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...

6.1CVSS5.9AI score0.0027EPSS
SaveExploits0
Veracode
Veracode
•added 2026/07/14 8:27 a.m.•23 views

Authentication Bypass

9Router is vulnerable to Authentication Bypass. The vulnerability is due to missing authentication checks for the /codex endpoint, where requests bypass the API key validation before being rewritten to protected API routes, allowing unauthenticated attackers to invoke upstream LLM provider APIs...

8.6CVSS5.9AI score0.00611EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•29 views

PT-2026-58422

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description A missing authentication check for a critical function in the Windows Server Update Service allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.00778EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•31 views

PT-2026-58149

Name of the Vulnerable Software and Affected Versions Microsoft Windows DNS affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At the moment, there is no...

6.1CVSS5.9AI score0.0027EPSS
SaveExploits0References5
Rows per page
Query Builder