65582 matches found
CVE-2026-71476
A flaw was found in Nx. The self-hosted HTTP remote cache component improperly extracts downloaded cache artifacts, allowing files to be written outside the intended directory. A malicious or on-path Man-in-the-Middle remote cache server can exploit this Zip-Slip vulnerability by providing a...
CVE-2026-73030
A flaw was found in unearth. This path traversal vulnerability exists in the iswithindirectory function, which fails to normalize paths before validation. This allows ../ sequences to bypass directory containment checks. An attacker can exploit this by supplying malicious tar archives with symlin...
CVE-2026-71390
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user...
CVE-2026-70354
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...
CVE-2026-68806
Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
UBUNTU-CVE-2026-70354
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...
CVE-2026-62871
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...
CVE-2026-62817
Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network...
UBUNTU-CVE-2026-62871
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...
CVE-2026-48385
ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write...
CVE-2026-48436
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...
CVE-2026-48437
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interactio...
CVE-2026-48376
is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access, causing a limited disruption to availability...
CVE-2026-25194
Out-of-bounds write in the firmware for the IntelR Slim Bootloader may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are...
CVE-2026-21279
is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction...
CVE-2026-20886
Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...
CVE-2026-20745
Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...
EUVD-2026-56770
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...
