90758 matches found
CVE-2026-1495: Insertion of Sensitive Information into Log File
The vulnerability, if exploited, could allow an attacker with Event Log Reader S-1-5-32-573 privileges to obtain proxy details, including URL and proxy credentials, from the PI to CONNECT event log files. This could enable unauthorized access to the proxy server...
CVE-2025-0012: Improper Handling of Overlap Between Protected Memory Ranges
Improper handling of overlap between the segmented reverse map table RMP and system management mode SMM memory could allow a privileged attacker corrupt or partially infer SMM memory resulting in loss of integrity or confidentiality...
CVE-2026-21537: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-25609: Missing Authorization
Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read-only...
CVE-2026-25610: Reachable Assertion
An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...
CVE-2026-1848: Allocation of Resources Without Limits or Throttling
Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resources. This only applies to connections accepted from the proxy port, pending the proxy protocol header...
CVE-2025-12063: Authorization Bypass Through User-Controlled Key
An insecure direct object reference allowed a non-admin user to modify or remove certain data objects without having the appropriate permissions...
CVE-2025-15310: Improper Link Resolution Before File Access
Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools...
CVE-2025-11547: Insertion of Sensitive Information into Log File
AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user...
CVE-2026-1774: Undefined Security Weakness
CASL Ability, versions 2.4.0 through 6.7.4, contains a prototype pollution vulnerability...
CVE-2025-12757: Improper Limitation of a Pathname to a Restricted Directory
An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view information they are not permitted to...
CVE-2026-1507: Uncaught Exception
The affected products are vulnerable to an uncaught exception that could allow an unauthenticated attacker to remotely crash core PI services resulting in a denial-of-service...
CVE-2025-13064: Uncaught Exception
A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server. This attack is only possible if the admin uses a client that have been tampered with...
CVE-2026-21522: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...
CVE-2026-21314: Out-of-bounds Read
Audition versions 25.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must...
CVE-2025-29950: Improper Access Control for Volatile Memory Containing Boot Code
Improper input validation in system management mode SMM could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution...
CVE-2026-21347: Integer Overflow or Wraparound
Bridge versions 15.1.3, 16.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-21516: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Github Copilot allows an unauthorized attacker to execute code over a network...
CVE-2026-23689: Unchecked Input for Loop Condition
Due to an uncontrolled resource consumption Denial of Service vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution th...