120197 matches found
CVE-2026-59128
Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-48446
CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...
CVE-2026-48442
CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Arbitrary file system read. An attacker could leverage this vulnerability to gain unauthorized read access to files or directories outside th...
CVE-2026-21279
is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction...
CVE-2026-20786
Out-of-bounds read for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local...
CVE-2026-20778
Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via...
CVE-2026-20749
Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Network adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via...
CVE-2016-20097
CVE-2016-20097 involves Weaver (Fanwei) E-cology 8.0. A vulnerability in the SignatureDownLoad servlet allows unauthenticated remote attackers to perform a SQL injection via the markId parameter, which is concatenated into a query. This can let an attacker control the returned markPath value and ...
EUVD-2016-10910
Weaver Fanwei E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbitrary files by injecting a UNION SELECT payload into the markId GET parameter, which is concatenated unsanitized into a SQL query. Attackers...
CVE-2016-20097 Weaver E-cology 8.0 SQL Injection File Read via SignatureDownLoad
Weaver Fanwei E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbitrary files by injecting a UNION SELECT payload into the markId GET parameter, which is concatenated unsanitized into a SQL query. Attackers...
EUVD-2026-56772
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...
EUVD-2026-56761
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-68814
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-56752
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...
EUVD-2026-56753
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-68797
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
EUVD-2026-56740
Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network...
EUVD-2026-56720
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...