Intel Processors 安全漏洞

Intel Processors are a series of processors developed by the American company Intel. There are security vulnerabilities in Intel Processors, which stem from the exposure of resources to incorrect ranges, potentially leading to information leaks. System software attackers with privileged access...

Intel Processors 缓冲区错误漏洞

Intel Processors are a series of processors developed by the American company Intel. Intel Processors have a buffer overflow vulnerability, which stems from improper buffer limits and may lead to privilege escalation. System software attackers with privileged access can potentially manipulate dat...

PT-2026-24495

Improper buffer restrictions in the UEFI DXE module for some IntelR Reference Platforms within UEFI may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local...

Intel Processors 安全漏洞

Intel Processors are a series of processors developed by the American company Intel. There are security vulnerabilities in Intel Processors, which stem from race conditions between the check time and the actual usage time. These vulnerabilities could lead to privilege escalation. System software...

PT-2026-24511

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.23 and earlier Description A stored Cross-Site Scripting XSS vulnerability exists in Adobe Experience Manager. A low-privileged attacker could exploit this issue to inject malicious scripts into vulnerable...

PT-2026-24497

Name of the Vulnerable Software and Affected Versions UEFI PdaSmm module for some IntelR reference platforms affected versions not specified Description A flaw exists in the UEFI PdaSmm module on certain IntelR reference platforms that could allow information disclosure. A system software adversa...

PT-2026-24498

Name of the Vulnerable Software and Affected Versions UEFI PdaSmm module affected versions not specified Description A time-of-check time-of-use race condition exists in the UEFI PdaSmm module on certain Intel reference platforms, potentially leading to information disclosure. A system software...

IBM Planning Analytics Advanced Certified Containers 安全漏洞

IBM Planning Analytics Advanced Certified Containers is a containerized enterprise planning and analysis software deployment component provided by the American multinational company IBM. Versions 3.1.0 to 3.1.4 of IBM Planning Analytics Advanced Certified Containers contain security...

Intel Processors 缓冲区错误漏洞

Intel Processors are a series of processors developed by the American company Intel. Intel Processors have a buffer overflow vulnerability, which stems from improper buffer limits and can lead to information leakage. System software attackers with privileged access can exploit this vulnerability...

PT-2026-24197

Name of the Vulnerable Software and Affected Versions ASSA ABLOY Visionline versions prior to 1.33 Description An issue exists in ASSA ABLOY Visionline that allows for configuration or environment manipulation due to incorrect default permissions, leading to execution with unnecessary privileges...

PT-2026-24166

IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables...

Intel Processors 输入验证错误漏洞

Intel Processors are a series of processors developed by the American company Intel. Intel Processors have a vulnerability related to input validation, which stems from improper input validation and may lead to privilege escalation. System software attackers with privileged access can potentially...

Microsoft Windows win32kfull Improper Locking Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

PT-2026-24161

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Enterprise Portal versions prior to 7.50 Description A privileged user uploading untrusted or malicious content that, when deserialized, could compromise the confidentiality, integrity, and availability of the host system. This...

PT-2026-24513

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.23 and earlier Description A stored Cross-Site Scripting XSS vulnerability exists in Adobe Experience Manager. A low-privileged attacker could exploit this issue to inject malicious scripts into vulnerable...

PT-2026-24509

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.23 and earlier Description A stored Cross-Site Scripting XSS issue exists in Adobe Experience Manager. A low-privileged attacker can inject malicious scripts into vulnerable form fields. Execution of...

CVE-2026-29773 kubewarden-controller cross-namespace data exfiltration via deprecated host callback binding

Kubewarden is a policy engine for Kubernetes. Kubewarden cluster operators can grant permissions to users to deploy namespaced AdmissionPolicies and AdmissionPolicyGroups in their Namespaces. One of Kubewarden promises is that configured users can deploy namespaced policies in a safe manner,...

CVE-2026-29773

Technical details for CVE-2026-29773 are not provided in the connected documents. The available materials mention read-only access via deprecated APIs but do not specify affected versions, fixes, or explicit exploit details.

CVE-2026-29773

Kubewarden is a policy engine for Kubernetes. Kubewarden cluster operators can grant permissions to users to deploy namespaced AdmissionPolicies and AdmissionPolicyGroups in their Namespaces. One of Kubewarden promises is that configured users can deploy namespaced policies in a safe manner,...

EUVD-2026-10349

Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a low-privileged authenticated user to restore deleted users and roles via crafted API requests...