384618 matches found
CVE-2026-73090 PeerTube: Cross-origin remote video takeover via Update activity
PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.2.2, processUpdateActivity and processUpdateVideo accept an ActivityPub Update containing a Video object without verifying that byActor.url is authorized for the host in videoObject.id, allowing a malicious federated server...
CVE-2026-47705 TypeBot vulnerable to CSV injection in result export
TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result export functionality. The application does not sanitize or escape user-supplied input when generating CSV files. An attacker can inject spreadsheet formulas into input fields, which are later execute...
CVE-2025-54512
A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary code execution...
CVE-2026-48767 Google Sheets OAuth access token disclosure to guest members via getAccessToken
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...
CVE-2022-50997 Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp
Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...
CVE-2026-0465
A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...
CVE-2016-20097 Weaver E-cology 8.0 SQL Injection File Read via SignatureDownLoad
Weaver Fanwei E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbitrary files by injecting a UNION SELECT payload into the markId GET parameter, which is concatenated unsanitized into a SQL query. Attackers...
CVE-2025-0046
Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution...
CVE-2026-48494 TypeBot vulnerable to cross-typebot WhatsApp preview webhook resume via global `wa-preview-{phone}` session ids
TypeBot is a chatbot builder tool. In version 3.16.1, an authenticated user who has read access to any typebot can resume a WhatsApp preview webhook session that belongs to a different typebot by mixing an authorized typebotId and blockId and a foreign preview phone number tied to another preview...
CVE-2025-8087
A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...
CVE-2026-62869 Azure Entra ID Spoofing Vulnerability
...
CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
...
CVE-2026-62917 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-58639 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-62839 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-65767 Microsoft Teams for Android Spoofing Vulnerability
...
CVE-2026-62738 Windows Management Instrumentation Information Disclosure Vulnerability
...
CVE-2026-62898 Microsoft QUIC Information Disclosure Vulnerability
...
CVE-2026-70354 .NET Core Remote Code Execution Vulnerability
...
CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
...
CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
...
CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
...
CVE-2026-70326 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-70130 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-70306 Microsoft Office SharePoint Spoofing Vulnerability
...
CVE-2026-68817 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-56179 Windows Network Address Translation (NAT) Spoofing Vulnerability
...
CVE-2026-68814 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-68812 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-68805 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-68803 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-68804 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-68801 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-68798 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-68799 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2026-68797 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2026-66809 Microsoft Office Graphics Component Information Disclosure Vulnerability
...
CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-66810 Microsoft Office Word Information Disclosure Vulnerability
...
CVE-2026-66807 Microsoft Office Graphics Component Remote Code Execution Vulnerability
...
CVE-2026-66806 Microsoft Office Word Information Disclosure Vulnerability
...
CVE-2026-66805 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
...
CVE-2026-65810 .NET Framework Elevation of Privilege Vulnerability
...
CVE-2026-65796 Windows iSCSI Target Service Remote Code Execution Vulnerability
...
CVE-2026-65798 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-65799 Windows DNS Elevation of Privilege Vulnerability
...