111 matches found
CVE-2026-54780
CoreWCF WS-Security 1.0 receive pipeline does not validate ds:Reference DigestMethod while validating ds:SignedInfo SignatureMethod, allowing a rejection of digest algorithms (e.g., SHA-1) to be bypassed in affected versions. Affected components include CoreWCF and CoreWCF.Primitives; fixed in Co...
CVE-2026-49875
A flaw was found in Apache CXF. The EndpointReferenceUtils and W3CMultiSchemaFactory classes within Apache CXF construct a SAXParserFactory without proper security configurations. This oversight enables out-of-band OOB external entity resolution, a type of XML External Entity XXE vulnerability. A...
Huawei EMUI and Huawei HarmonyOS System Service Framework Privilege Bypass Vulnerability
Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. A privilege bypass vulnerability exists in the Huawei EMUI and Huawei HarmonyOS system service framework, which c...
CVE-2026-28542
Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-9812
Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28542
Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28542
Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28542
Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28542
Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28542
Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28542
A CVE entry for CVE-2026-28542 describes a permission bypass in the system service framework. The vulnerability is local (attack vector: LOCAL) with low attack complexity and no required privileges, and it could affect availability (C: High, I: Low, A: Low) per CVSS v3.1 (score 7.3, HIGH). The de...
PT-2026-23428
Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28542: Improper Handling of Exceptional Conditions
Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability...
Huawei EMUI和Huawei HarmonyOS 安全漏洞
Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. A privilege bypass vulnerability exists in the Huawei EMUI and Huawei HarmonyOS system service framework, which c...
CVE-2025-62182
The CVE-2025-62182 entry affects Pega Customer Service Framework versions 8.7.0 through 25.1.0 and is due to an unrestricted file upload vulnerability that could allow a privileged user to upload a malicious file. Reported by multiple sources (Red Hat, NVD, CIRCL, CNNVD, PT Security) with consist...
CVE-2025-62182: Unrestricted Upload of File with Dangerous Type
Pega Customer Service Framework versions 8.7.0 through 25.1.0 are affected by a Unrestricted file upload vulnerability, where a privileged user could potentially upload a malicious file...
PT-2026-2483
Name of the Vulnerable Software and Affected Versions Pega Customer Service Framework versions 8.7.0 through 25.1.0 Description A flaw exists in Pega Customer Service Framework that allows a privileged user to upload a malicious file due to an unrestricted file upload. Recommendations Update Pega...
Pega Customer Service Framework 安全漏洞
Pega Customer Service Framework is a customer service framework from Pega Corporation in the United States. A security vulnerability exists in Pega Customer Service Framework versions 8.7.0 through 25.1.0, which originates from an unrestricted file upload and could allow a privileged user to uplo...