175919 matches found
PT-2026-70377
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interactio...
PT-2026-70021
Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence MII affected versions not specified Description An attacker with high privileges can submit specially crafted input to certain functionality that is processed without sufficient validation. This...
PT-2026-70756
Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
PT-2026-70076
Name of the Vulnerable Software and Affected Versions Samsung Open Source rlottie affected versions not specified Description Improper validation of the specified quantity in input allows for input data manipulation. Recommendations At the moment, there is no information about a newer version tha...
PT-2026-70864
Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description An issue in Queryable Encryption maintenance operations allows an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of da...
PT-2026-70762
Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description Improper input validation in Microsoft Office PowerPoint allows...
PT-2026-70319
Improper input validation for some IntelR Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This...
PT-2026-70087
Name of the Vulnerable Software and Affected Versions Picketlink Federation SAML affected versions not specified Description The unsolicited response handler accepts forged assertions without verification or validation. This allows an unauthenticated attacker to authenticate as any principal in a...
PT-2026-70075
Name of the Vulnerable Software and Affected Versions Samsung Open Source rlottie affected versions not specified Description An issue exists where improper validation of the specified quantity in the input and the allocation of resources without limits or throttling allows for excessive...
PT-2026-70376
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...
PT-2026-70829
Name of the Vulnerable Software and Affected Versions Coturn versions prior to 4.16.0 Description The dtls server input handler and create new connected udp socket functions in src/apps/relay/dtls listener.c retain the state of the OpenSSL dtls1 reassemble fragment function when processing a...
PT-2026-70643
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...
PT-2026-70792
Name of the Vulnerable Software and Affected Versions IntelR XeonR processors affected versions not specified Description Improper input validation within the firmware may allow an escalation of privilege. A privileged user, combined with a high complexity attack targeting startup code and the...
PT-2026-70038
Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to correctly validate client certificates during specific callback flows. An attacker with low privileges who possesses a certificate issued by the same trusted...
PT-2026-70347
Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description Improper input validation allows an attacker with high privileges to crash the application, resulting in a denial-of-service condition. This issue does not require user interaction...
2026.3 IPU, Intel® Xeon® Processor Firmware Advisory
Summary: Potential security vulnerabilities in some Intel® Xeon® Processors may allow escalation of privilege. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-20713 Description: Always-incorrect control flow implementation i...
PT-2026-70332
Improper input validation for some vLLM Hardware Plugin for IntelR GaudiR software before version 0.16.0 within Ring 3: User Applications may allow a denial of service. Authorized adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...
2026.3 IPU, Intel® Chipset Firmware Advisory
Summary: Potential security vulnerabilities in some Intel® Active Management Technology Intel® AMT and some Intel® Standard Manageability may allow denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details:...
PT-2026-70612
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper input validation allows an unauthorized attacker to execute arbitrary code over a network, which can lead to a full system compromise. Recommendations At the...
PT-2026-70565
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...