171 matches found
CVE-2026-102364 mall4j through 4.0 Improper Authentication Accepts Storefront Tokens on Admin API
mall4j through 4.0 fails to validate the sysType field in sa-token sessions, allowing storefront customers to authenticate as back-office users by reusing their session tokens. Attackers can register on the public storefront and use their customer session token to access admin endpoints lacking...
CVE-2026-94104
NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint (filemanager.php). The root cause is a failure to validate file extensions for new filenames or when the chunks parameter is 2 or higher. An attacker with view-only back-office access can u...
PT-2026-95955
Name of the Vulnerable Software and Affected Versions NivoCart versions prior to 2.4.1 Description An arbitrary file upload flaw exists in the File Manager multi endpoint. The system fails to validate file extensions for new filenames or when the chunks parameter is set to 2 or higher. This allow...
Security Updates for Microsoft Access Products C2R (September 2026)
The Microsoft Access Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. CVE-2026-69529, CVE-2026-69778 - Stack-based buffer overflow ...
Security Updates for Microsoft Access Products (September 2026)
The Microsoft Access Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally. CVE-2026-69477 - Heap-based buffer overflow in Microsoft Office...
CVE-2026-69778
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-69614
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-69529
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-69477
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally...
EUVD-2026-73717
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally...
CVE-2026-69477
A heap-based buffer overflow in Microsoft Office Access allows an authorized attacker with local access and low privileges to execute code, provided user interaction is required. The vulnerability is rated CVSS 7.3 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, reflecting full impac...
EUVD-2026-73714
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-69614
CVE-2026-69614 is a stack-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (HIGH) , with a vector of network attack, low complexity, no privileges required, and user interac...
EUVD-2026-73242
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-69778
CVE-2026-69778 is a heap-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The CVSS v3.1 score is 8.8 (HIGH) with a network vector, low complexity, no required privileges, but user interaction required . CISA's SSVC assessment in...
EUVD-2026-73239
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-69529
CVE-2026-69529 is a heap-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The attack requires user interaction (e.g., opening a crafted file) but needs no prior privileges. The CVSS 3.1 score is 8.8 (HIGH) , with impacts of high...
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...