1180154 matches found
CVE-2026-109410: Incorrect Calculation
A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the function OmsOrderServiceImpl.updateMoneyInfo of the file /order/update/moneyInfo of the component mall-admin/mall-portal. The manipulation leads to incorrect calculation. The attack can be initiated...
Microsoft Windows: CVE-2026-85928: Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...
ROS-20261013-73-0247
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-109156: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function extractenv of the file mlserver/env.py of the component environmenttarball Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was contacted early about th...
CVE-2026-70571: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-88115: Windows Server for NFS Remote Code Execution Vulnerability
Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network...
PT-2026-112022
Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A use after free issue in Windows Message Queuing allows an unauthorized attacker to execute code over a network. Use after free is a memory corruption flaw that occurs when a...
CVE-2026-102870: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...
PT-2026-111954
Name of the Vulnerable Software and Affected Versions Microsoft.AspNetCore.Components.WebAssembly.Server versions 10.0.0 through 10.0.12 Microsoft.AspNetCore.Components.WebAssembly.Server versions 11.0.0-preview.1 through 11.0.0-rc.1 Description Improper control of code generation in ASP.NET Core...
Microsoft Visual Studio: CVE-2026-102870: ASP.NET Core Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83642: Windows Domain Name Service Remote Code Execution Vulnerability
Access of resource using incompatible type 'type confusion' in DNS Server allows an unauthorized attacker to execute code over a network...
PT-2026-111208
Name of the Vulnerable Software and Affected Versions TensorLayer versions prior to 2.2.5 Description An issue exists in the HDF5 Loading component within the load hdf5 graph function of the tensorlayer/files/utils.py file. A remote attacker can manipulate the model config argument to trigger...
PT-2026-111941
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-77496: Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
Microsoft Exchange: CVE-2026-70571: Microsoft Exchange Server Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...
PT-2026-112380
Name of the Vulnerable Software and Affected Versions Skype for Business Server versions prior to 2019 CU8 Skype for Business Server versions prior to 2015 CU13 Skype for Business Server Subscription Edition versions prior to CU1 Microsoft Lync affected versions not specified Description An...
Microsoft Windows: CVE-2026-70137: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally...
ROS-20261013-73-0121
The vulnerability of the udpreadskb function in the net/ipv4/udp.c module of the Linux kernel’s IPv4 protocol implementation is related to the lack of resource initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...