128216 matches found
Microsoft Excel 缓冲区错误漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to obtain sensitive information...
Pure Storage FlashBlade 安全漏洞
Pure Storage FlashBlade is an integrated storage platform for file and object workloads developed by the American company Pure Storage. There is a security vulnerability in Pure Storage FlashBlade, which may record sensitive information under certain conditions...
PT-2026-32811
Name of the Vulnerable Software and Affected Versions Windows Remote Procedure Call affected versions not specified Description An issue in Windows Remote Procedure Call allows an authorized attacker to locally disclose sensitive information. This data leak can be used by attackers to map the...
PT-2026-32861
Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description Insertion of sensitive information into log files allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer...
Microsoft Windows File Explorer 信息泄露漏洞
Microsoft Windows File Explorer is a file manager application developed by the American company Microsoft. The Microsoft Windows File Explorer has a vulnerability that allows for the exposure of sensitive information. Attackers can exploit this vulnerability to obtain sensitive data. The followin...
Microsoft Windows UPnP 安全漏洞
Microsoft Windows UPnP is a device proxy provided by Microsoft Corporation. It serves as a proxy that allows Windows network connections to recognize the IP address of ZoneDirector. There are security vulnerabilities associated with Microsoft Windows UPnP. Attackers can exploit these...
Microsoft Windows Local Security Authority Subsystem Service 安全漏洞
The Microsoft Windows Local Security Authority Subsystem Service is an internal program of the American company Microsoft, responsible for implementing Windows system security policies. It verifies user identities when a computer or server is logged in, manages user password changes, and generate...
PT-2026-32584
MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting XSS vulnerability that allows authenticated users to inject arbitrary HTML and JavaScript into the Application prologue Opening Remarks field by wrapping malicious payloads in tags...
PT-2026-32860
Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description Insertion of sensitive information into log files allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer...
PT-2026-32732
🪟 MSRC “confidence signal” for CVE-2026-26152: Microsoft says “we’re pretty sure” crypto can EoP… aka update before you guess wrong. Windows admins: as usual, trust the patch, not the vibes. https://t.co/hiLCcbJJJU WindowsSecurity LocalPrivilegeEscalation Cve202626152 https://t.co/cgNnN74y09...
Microsoft Word 缓冲区错误漏洞
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. An information disclosure vulnerability exists in Microsoft Word. An attacker could exploit this vulnerability to obtain sensitive information...
PT-2026-32810
CVE-2026-32084 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. https://t.co/h229XazPDT...
PT-2026-32858
Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue exists where sensitive information is inserted into a log file, allowing an authorized attacker to disclose information locally. This can potentially be used to bypass system...
PT-2026-32887
Windows Snipping Tool affected versions not specified Description An information disclosure issue exists in the Windows Snipping Tool that allows remote attackers to capture NTLM authentication responses from users. Exploitation requires user interaction, where a victim is tricked into visiting a...
PT-2026-32603
Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. tencent-cloud-cls log export uses plaintext HTTP This issue affects Apache APISIX: from 2.99.0 through 3.15.0. Users are recommended to upgrade to version 3.16.0, which fixes the issue...
PT-2026-32665
Name of the Vulnerable Software and Affected Versions FortiSOAR PaaS versions 7.6.0 through 7.6.3 FortiSOAR PaaS versions 7.5.0 through 7.5.2 FortiSOAR PaaS version 7.4 FortiSOAR PaaS version 7.3 FortiSOAR on-premise versions 7.6.0 through 7.6.2 FortiSOAR on-premise versions 7.5.0 through 7.5.1...
PT-2026-32673
CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information to be exposed when a Web Admin user executes a malicious file provided by an attacker...
Microsoft Windows Shell 信息泄露漏洞
The Microsoft Windows Shell is the graphical user interface for the Windows operating system from Microsoft USA.Easily recognizable elements of the Windows shell include features such as the desktop, the taskbar, the start menu, the task switcher, and autoplay. On some versions of Windows, featur...
PT-2026-32714
CVE-2026-0207 A vulnerability exists in FlashBlade whereby sensitive information may be logged under specific conditions. https://t.co/aX7fhIcRqI...
Microsoft Windows Kernel 日志信息泄露漏洞
The Microsoft Windows Kernel is the kernel of the Windows operating system from the American company Microsoft. An information disclosure vulnerability exists in Microsoft Windows Kernel, which can be exploited by attackers to obtain sensitive information...