CVE-2026-69190: Authorization Bypass Through User-Controlled Key

Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permission but without entity ownership to include a shareRequest that grants owner permissions to an arbitrary account. Th...

PT-2023-21332 · Wondershare · Wondershare Recoverit

Name of the Vulnerable Software and Affected Versions: Wondershare Recoverit version 10.6.3 Description: An issue in Wondershare Recoverit allows a remote attacker to execute arbitrary commands via the recoverit setup full4134.exe file. Recommendations: For version 10.6.3, consider removing or...

CVE-2020-36251

ownCloud Server before 10.3.0 allows an attacker, who has received non-administrative access to a group share, to remove everyone else's access to that share...

Dolby Audio X2 (DAX2) privilege escalation

A vulnerability has been identified with the file permissions for the Dolby DAX2 application programming interface API that could allow a local user to run files with system level privileges. Mitigation Strategy for Customers what you should do to protect yourself: Lenovo is currently working wit...