372973 matches found
CVE-2026-108971: Improper Verification of Cryptographic Signature
A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...
CVE-2026-110131: Missing Authorization
ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/id endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply isDraft=true or...
CVE-2026-107612
Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process. The named shared memory segment in the Global...
PT-2026-112943
Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An out-of-bounds read occurs in the DNS Server, which allows an authorized attacker to cause a denial-of-service condition over a network. This issue enables attackers to negatively affect...
CVE-2026-14909: Generation of Error Message Containing Sensitive Information
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure vulnerability that allows an authenticated attacker to obtain sensitive information when restConnector-2.0 is enbabled...
PT-2026-111557
Name of the Vulnerable Software and Affected Versions Froxlor versions 0.10.0 through 2.3.13 Description Missing authorization allows reseller accounts to access MySQL server and cronjob configurations intended only for full administrators. This is achieved by using API read commands through the...
PT-2026-113056
Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system. Recommendations At the moment,...
CVE-2026-85811: Use After Free
Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-83642: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in DNS Server allows an unauthorized attacker to execute code over a network...
UBUNTU-CVE-2026-107615
An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init and ThemeLib load screenhooks32.dll / screenhooks64.dll with LoadLibrary using a bare fi...
CVE-2026-96246: Out-of-bounds Read
Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to disclose information over a network...
CVE-2026-83722: Use After Free
Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
CVE-2026-83691: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally...
CVE-2026-83635: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network...
CVE-2026-70058: Out-of-bounds Write
Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
CVE-2026-83753: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...
CVE-2026-70087: Incorrect Authorization
Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally...
PT-2026-113260
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113447
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than i...