5716 matches found
CVE-2026-49179
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
CVE-2026-54113
Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network...
EUVD-2026-56299
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...
EUVD-2026-56300
Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network...
EUVD-2026-56294
Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
CVE-2026-57105
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-20715
Improper input validation in some firmware for some IntelR Active Management Technology IntelR AMT and some IntelR Standard Manageability may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result m...
EUVD-2026-56475
Improper input validation in some firmware for some IntelR Active Management Technology IntelR AMT and some IntelR Standard Manageability may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result m...
CVE-2026-20708
CVE-2026-20708 affects the Intel AMT and Intel Standard Manageability subsystem. The issue is described as insertion of sensitive information into a log file, enabling information disclosure. The entry indicates a network-adjacent attacker with high privileges and high attack complexity could cau...
CVE-2026-20702
Technical details about CVE-2026-20702 are not publicly available in the provided documents. No product/vendor/version specifics, exploit status, or remediation are described here. Monitor for updates.
Microsoft Exchange Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...
Microsoft Exchange Server Elevation of Privilege Vulnerability
Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
.NET Security Feature Bypass Vulnerability
Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...
Windows DNS Server Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to execute code over a network...
Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to execute code over a network...
Windows HTTP Protocol Stack Tampering Vulnerability
Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...