PT-2026-41934

Name of the Vulnerable Software and Affected Versions Portrait Dell Color Management versions prior to 3.7.0 Description A symbolic link issue exists in the Portrait Dell Color Management application on Windows. A local low-privileged user can escalate privileges to Administrator because the...

Microsoft Entra Cloud Sync Installed (Windows)

Binary data microsoftentracloudsyncwininstalled.nbin...

Progress Telerik Document Processing Libraries Installed (Windows)

Binary data progresstelerikdocumentprocessinglibrarieswininstalled.nbin...

CVE-2025-20387

In Splunk Universal Forwarder for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory. This lets non-administrator users on...

CVE-2025-20387

In Splunk Universal Forwarder for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory. This lets non-administrator users on...

CVE-2025-20387 Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgrade

In Splunk Universal Forwarder for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory. This lets non-administrator users on...

Siemens Teamcenter Visualization Installed (Windows)

Binary data siemensteamcentervisualizationinstalled.nbin...

Command Injection

Overview fastmcp is a The fast, Pythonic way to build MCP servers and clients. Affected versions of this package are vulnerable to Command Injection via the servername field. An attacker can execute arbitrary OS commands by supplying crafted input to this field during the installation process on...

CVE-2025-11535

MongoDB Connector for BI installation via MSI on Windows leaves ACLs unset on custom install directories allows Privilege Escalation.This issue affects MongoDB Connector for BI: from 2.0.0 through 2.14.24...

EUVD-2021-15481

Malware in sbrugna...

EUVD-2021-15473

Malware in sbrugna...

EUVD-2021-15477

Malware in sbrugna...

EUVD-2019-15799

Malware in sbrugna...

EUVD-2017-15516

Malware in sbrugna...

EUVD-2021-15480

Malware in sbrugna...

EUVD-2018-1369

Malware in sbrugna...

EUVD-2021-15482

Malware in sbrugna...

EUVD-2021-21070

Malware in sbrugna...

EUVD-2011-2647

Malware in sbrugna...

EUVD-2017-5877

Malware in sbrugna...