291894 matches found
CVE-2026-70233: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-70084: Improper Limitation of a Pathname to a Restricted Directory
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally...
CVE-2026-83586: Weak Authentication
Weak authentication in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
PT-2026-111313
Name of the Vulnerable Software and Affected Versions AssetView affected versions not specified AssetView CLOUD affected versions not specified AssetView Cloud + affected versions not specified Description An incorrect permission assignment for critical resources allows a local authenticated...
PT-2026-112554
Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description Improper control of code generation leads to a code injection issue, allowing an authorized attacker to execute arbitrary code over a network and affect the system...
CVE-2026-85822: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally...
CVE-2026-108965: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editquantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been...
PT-2026-113306
Name of the Vulnerable Software and Affected Versions Adobe Experience Manager affected versions not specified Description An Improper Limitation of a Pathname to a Restricted Directory, also known as Path Traversal, allows a low-privileged attacker to perform arbitrary file system writes. This...
CVE-2026-107615
An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init and ThemeLib load screenhooks32.dll / screenhooks64.dll with LoadLibrary using a bare fi...
PT-2026-112766
Name of the Vulnerable Software and Affected Versions Windows Distributed File System DFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Distributed File System DFS, which allows an authorized attacker to execute arbitrary code over a network and...
PT-2026-112828
Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A use-after-free condition in the Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...
PT-2026-111676
Name of the Vulnerable Software and Affected Versions SourceCodester Online Exam System version 1.0 Description An issue exists in the Login Endpoint within the file adminpanel/admin/query/loginExe.php. Remote manipulation of the username and pass arguments allows for SQL injection, a technique...
PT-2026-111326
Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System versions up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c Description An issue exists in the Password Reset component within the file 'User/forgot3.php'. Remote attackers can perform SQL injection, a...
PT-2026-111623
Name of the Vulnerable Software and Affected Versions girishsaraf Online-Appointment-Booking-System versions up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5 Description An issue exists in the Admin CRUD Endpoint within the file Admin/deleteclinic.php. Manipulation of the cid/did arguments allows f...
PT-2026-112847
Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description An out-of-bounds read in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose sensitive informatio...
PT-2026-111898
Name of the Vulnerable Software and Affected Versions Windows Network File System affected versions not specified Description An untrusted pointer dereference in the Windows Network File System allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment,...
Microsoft Windows: CVE-2026-83664: Windows Portable Device File System Driver Information Disclosure Vulnerability
Access of resource using incompatible type 'type confusion' in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally...
CVE-2026-85823: Use After Free
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...