292207 matches found
CVE-2026-101020: Incorrect Permission Assignment for Critical Resource
An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or Client Terminal for the product is runnin...
ROS-20261013-73-0485
The vulnerability of the hashdigestkey function in the drivers/crypto/caam/caamalgqi2.c file of the Linux kernel cryptographic accelerator driver is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to cause a system failure...
Microsoft Windows: CVE-2026-85931: Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...
PT-2026-112766
Name of the Vulnerable Software and Affected Versions Windows Distributed File System DFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Distributed File System DFS, which allows an authorized attacker to execute arbitrary code over a network and...
PT-2026-111137
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Visual Composer affected versions not specified Description Insufficient authorization checks in certain portal functionality allow an attacker with low privileges to invoke internal operations on a preconfigured remote system...
CVE-2026-85798: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-85355: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-96938: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...
PT-2026-111283
Name of the Vulnerable Software and Affected Versions itsmeravitejak Online-Examination-System versions up to e6208e630b14657999bbfe4c9912302d2a1e2449 Description A remote SQL injection is possible within the Registration Form component. The issue exists in the MySQLDB::addNewUser function locate...
CVE-2026-19936: Concurrent Execution using Shared Resource with Improper Synchronization
The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayablemsg.c shares three intrusive lists busyctx, freectx, freechunks and one kworkdelayable between two cooperative threads with no synchronization: btmeshdelayablemsgmanage runs on the Bluetooth host RX thread,...
Microsoft Windows: CVE-2026-70132: Windows Portable Device File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-108948: Improperly Controlled Modification of Dynamically-Determined Object Attributes
A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Profile Update Handler. The manipulation of the argument usertypeid leads to...
CVE-2026-108968: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/saleshistory.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...
Microsoft Windows: CVE-2026-96857: Windows Projected File System Information Disclosure Vulnerability
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-84009: Windows Projected File System Tampering Vulnerability
Time-of-check time-of-use toctou race condition in Windows Projected File System allows an authorized attacker to perform tampering locally...
Microsoft Windows: CVE-2026-96947: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-109524: Missing Authorization
A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this issue is some unknown functionality of the file Admin/showdoctor.php of the component Admin Display Pages. This manipulation causes missing authorizatio...
CVE-2026-108956: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launch...
CVE-2026-106634: Improper Limitation of a Pathname to a Restricted Directory
Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in arbitrary file system write. A low-privileged attacker could leverage this vulnerability to write files to unauthorized locations on the file...