1764 matches found
PT-2026-72117
Name of the Vulnerable Software and Affected Versions iCagenda versions prior to 2.0.0-4.0.11 Description Authenticated backend operators with permissions to access the extension can perform SQL injection. This occurs due to an unescaped numeric filter, allowing the injection of malicious SQL...
CVE-2026-49263: Numeric Truncation Error
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public csdisasm and csdisasmiter APIs. For a large but well-formed brtable instruction, the WASM decoder accumulates the immediate...
CVE-2026-73492 Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTML5::Scrub.alloweduri? does not reject javascript: or vbscript: URIs whose scheme is split by semicolon-less numeric character references...
EUVD-2026-56904
An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash denial of service and may potentially expose ...
CVE-2026-68804
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-65798
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-65797
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-63525
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-62881
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-62883
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-62769
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-62698
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally...
CVE-2026-68804
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-56758
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-56743
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...
EUVD-2026-56741
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...
EUVD-2026-56691
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally...
EUVD-2026-56683
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...