291979 matches found
CVE-2026-96857: Files or Directories Accessible to External Parties
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally...
CVE-2026-70084: Improper Limitation of a Pathname to a Restricted Directory
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally...
PT-2026-111283
Name of the Vulnerable Software and Affected Versions itsmeravitejak Online-Examination-System versions up to e6208e630b14657999bbfe4c9912302d2a1e2449 Description A remote SQL injection is possible within the Registration Form component. The issue exists in the MySQLDB::addNewUser function locate...
PT-2026-112736
Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description The Windows Common Log File System Driver contains a flaw where functionality from an untrusted control sphere is included, allowing an authorized attacker to...
CVE-2026-85822: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally...
APSB26-144 : Security update available for Adobe ColdFusion
Adobe has released a priority 2 security update for Adobe ColdFusion. This update addresses vulnerabilities rated critical, high, and medium that could result in arbitrary code execution, security feature bypass, arbitrary file system write, privilege escalation, arbitrary file system read,...
APSB26-163 : Security update available for Adobe Content Credentials SDK
Adobe has released a priority 3 security update for Adobe Content Credentials SDK. This update addresses vulnerabilities rated high and medium that could result in security feature bypass, application denial-of-service, and arbitrary file system write. Adobe is not aware of any exploits in the wi...
Microsoft Windows: CVE-2026-83683: Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to disclose information over a network...
ROS-20261013-73-0446
The vulnerability in the kernel-lt is related to the lack of checks for division by zero. Exploiting this vulnerability can allow an attacker to cause a system failure...
Microsoft Windows: CVE-2026-83763: Windows Input System Elevation of Privilege Vulnerability
Access of resource using incompatible type 'type confusion' in Windows Input System allows an authorized attacker to elevate privileges locally...
CVE-2026-107615
An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init and ThemeLib load screenhooks32.dll / screenhooks64.dll with LoadLibrary using a bare fi...
PT-2026-112766
Name of the Vulnerable Software and Affected Versions Windows Distributed File System DFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Distributed File System DFS, which allows an authorized attacker to execute arbitrary code over a network and...
PT-2026-112828
Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A use-after-free condition in the Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...
PT-2026-111676
Name of the Vulnerable Software and Affected Versions SourceCodester Online Exam System version 1.0 Description An issue exists in the Login Endpoint within the file adminpanel/admin/query/loginExe.php. Remote manipulation of the username and pass arguments allows for SQL injection, a technique...
PT-2026-111326
Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System versions up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c Description An issue exists in the Password Reset component within the file 'User/forgot3.php'. Remote attackers can perform SQL injection, a...
PT-2026-111623
Name of the Vulnerable Software and Affected Versions girishsaraf Online-Appointment-Booking-System versions up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5 Description An issue exists in the Admin CRUD Endpoint within the file Admin/deleteclinic.php. Manipulation of the cid/did arguments allows f...
PT-2026-112847
Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description An out-of-bounds read in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose sensitive informatio...
Microsoft Windows: CVE-2026-83664: Windows Portable Device File System Driver Information Disclosure Vulnerability
Access of resource using incompatible type 'type confusion' in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally...