Lucene search
+L

6533 matches found

CNNVD
CNNVD
•added 2026/03/02 12:00 a.m.•16 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android, which stems from a logic error in the loadDataAndPostValue function for multiple files, which may mask the use of permissions and can be exploited by an attacker to cause a...

8.4CVSS5.8AI score0.00102EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/02/25 3:30 a.m.•17 views

EUVD-2026-8579

CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs...

8.5CVSS5.3AI score0.00168EPSS
SaveExploits0References3
NVD
NVD
•added 2026/02/25 2:16 a.m.•25 views

CVE-2026-2914

CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs...

8.5CVSS0.00168EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/02/25 1:33 a.m.•9 views

CVE-2026-2914

CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs...

8.5CVSS5.3AI score0.00168EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/02/25 1:33 a.m.•49 views

CVE-2026-2914

CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs...

8.5CVSS0.00168EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/25 12:00 a.m.•2 views

CVE-2026-20099: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to perform command injection attacks on an affected system and elevate privileges to root. This vulnerability is...

6.7CVSS6.4AI score0.00665EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/25 12:00 a.m.•43 views

PT-2026-21829

Name of the Vulnerable Software and Affected Versions CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower Description The CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower have a condition that may allow unauthorized privilege elevation through CyberArk elevati...

8.5CVSS6AI score0.00168EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/25 12:00 a.m.•1 views

CVE-2026-2914: Improper Privilege Management

CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs...

8.5CVSS5.7AI score0.00168EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•26 views

Genetec Update Service 安全漏洞

The Genetec Update Service is a patch distribution backend component of the American company Genetec. There is a security vulnerability in the Genetec Update Service. This vulnerability stems from the possibility of local administrators leaking information from the configuration page, which could...

8.8CVSS5.8AI score0.0009EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/20 1:25 p.m.•12 views

CVE-2026-22267

Dell PowerProtect Data Manager, versions prior to 19.22, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.8CVSS5.6AI score0.00423EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/19 7:21 p.m.•18 views

CVE-2025-33249

NVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script, where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, a...

7.8CVSS5.7AI score0.00178EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/19 10:16 a.m.•14 views

CVE-2026-22267

Dell PowerProtect Data Manager, versions prior to 19.22, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.8CVSS5.8AI score0.00423EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/19 1:27 a.m.•16 views

CVE-2026-26119

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.5AI score0.00808EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/02/19 12:00 a.m.•19 views

PT-2026-20779

Dell PowerProtect Data Manager, versions prior to 19.22, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.1CVSS5.6AI score0.00423EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/02/18 12:00 a.m.•19 views

The vulnerability of Intel microprogramming software, related to incorrect handling of values, allows attackers to exploit their privileges.

The vulnerability of Intel microprogramming software is related to incorrect handling of values. Exploiting this vulnerability can allow attackers to enhance their privileges...

3.9CVSS5.8AI score0.00141EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/02/13 12:00 a.m.•10 views

Security Updates for Microsoft Word Products C2R (February 2026)

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2026-21514 - An information disclosure vulnerability. An attacker can exploit...

7.8CVSS6AI score0.0385EPSS
SaveExploits0References3
OSV
OSV
•added 2026/02/12 3:15 a.m.•10 views

CVE-2026-23857

Dell Update Package DUP Framework, versions 23.12.00 through 24.12.00, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.2CVSS5.8AI score0.00096EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/12 1:46 a.m.•45 views

CVE-2026-23856

Dell iDRAC Service Module iSM for Windows, versions prior to 6.0.3.1, and Dell iDRAC Service Module iSM for Linux, versions prior to 5.4.1.1, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to...

7.8CVSS0.00097EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/12 12:00 a.m.•38 views

PT-2026-7915

Intego Log Reporter, a macOS diagnostic utility bundled with Intego security products that collects system and application logs for support analysis, contains a local privilege escalation vulnerability. A root-executed diagnostic script creates and writes files in /tmp without enforcing secure...

8.5CVSS5.7AI score0.00122EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/02/12 12:00 a.m.•23 views

PT-2026-7810

Dell iDRAC Service Module iSM for Windows, versions prior to 6.0.3.1, and Dell iDRAC Service Module iSM for Linux, versions prior to 5.4.1.1, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to...

7.8CVSS5.5AI score0.00097EPSS
SaveExploits0References2
Rows per page
Query Builder