200565 matches found
PT-2026-70383
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not requir...
PT-2026-70287
Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description Exposure of sensitive information within Ring 2: Device Drivers may allow an escalation of privilege. An unprivileged software adversary with an...
PT-2026-70340
Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of...
PT-2026-70471
Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free condition in the Windows Kernel allows an unauthorized attacker to elevate privileges. This issue can be exploited through a physical attack to affect the system...
PT-2026-70573
Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is n...
PT-2026-70027
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server Java Adobe Document Service affected versions not specified Description The Adobe Document Service component uses outdated open source cryptographic and data transfer libraries. A low-privileged authenticated...
PT-2026-70441
Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description An out-of-bounds read exists that allows an unauthorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about ...
PT-2026-76021
The /debug/pprof/cmdline endpoint in Dgraph Alpha discloses the command-line arguments used to start the process, which may include the administrator's authentication token if provided via the --auth token flag. This allows an unauthenticated remote attacker to obtain the token and gain full...
PT-2026-70328
Protection mechanism failure for some IntelR oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. Th...
PT-2026-70638
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...
PT-2026-70435
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...
PT-2026-70094
Name of the Vulnerable Software and Affected Versions EAP affected versions not specified Description A flaw exists in the IIOP Internet Inter-ORB Protocol of EAP. The listener's NameService accepts bind operations without requiring authentication. This allows an attacker to hijack JNDI Java Nami...
PT-2026-70223
Name of the Vulnerable Software and Affected Versions @swc/html versions prior to 1.15.47-nightly-20260729.1 swc html minifier versions prior to 59.0.0 Description The minifyJson processing in crates/swc html minifier/src/lib.rs fails to implement the escape json for html script behavior when...
PT-2026-70327
Use after free for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. System software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local...
PT-2026-70211
Name of the Vulnerable Software and Affected Versions SIMULIA Execution Engine versions Release 2023 through Release 2026 Description A Deserialization of Untrusted Data issue exists, which could allow an unauthenticated attacker to achieve remote code execution. Deserialization is the process of...
PT-2026-70322
is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction...
PT-2026-70456
Name of the Vulnerable Software and Affected Versions Winlogon affected versions not specified Description A use-after-free condition in Winlogon allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to u...
PT-2026-71943
CVE-2023-54371 - Rejected reason: This CVE ID has been rejected. CVE ID :CVE-2023-54371 Published : Aug. 11, 2026, 3:17 p.m. | 14 minutes ago Description :Rejected reason: This CVE ID has been rejected. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products,...
PT-2026-70772
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...
PT-2026-70314
Improper authentication for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...
PT-2026-70391
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Imaging Component during the parsing of ICC files. This out-of-bounds write allows an unauthorized attacker to execute code locall...
PT-2026-70814
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction...
PT-2026-70816
Adobe Commerce is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerabl...
PT-2026-70370
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to disclose information over a network...
PT-2026-70318
Time-of-check time-of-use race condition for the IntelR NPU Driver for Windows for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result...
PT-2026-70350
Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description A Heap-based Buffer Overflow occurs, which may allow arbitrary code execution within the context of the current user. A Heap-based Buffer Overflow is a memory corruption issue that happens...
PT-2026-70793
Name of the Vulnerable Software and Affected Versions TypeBot versions prior to 3.17.0 Description The result export functionality fails to sanitize or escape user-supplied input when generating CSV files. This allows an attacker to inject spreadsheet formulas into input fields. These formulas ar...
PT-2026-70032
Name of the Vulnerable Software and Affected Versions SAP NetWeaver and ABAP Platform affected versions not specified Description In the Change and Transport System - Customer Transport Integration Wizard, a low-privileged user can modify configuration tables that control access to data objects...
PT-2026-70658
Name of the Vulnerable Software and Affected Versions Windows Remote Access API affected versions not specified Description A heap-based buffer overflow in the Windows Remote Access API allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...
PT-2026-70183
A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted DFT files. This could allow an attacker ...
PT-2026-70480
Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A heap-based buffer overflow occurs in Windows Message Queuing, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...
PT-2026-70384
CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...
PT-2026-70539
Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A use after free issue in Windows DNS allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use after free is a memory corruption flaw that...
PT-2026-70487
Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A use-after-free condition in the Windows Telephony Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...
PT-2026-70826
Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse options function in nselib/packet.lua to allocate...
PT-2026-70935
Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's cli/src/main/resources/application.yml serves Micronaut management endpoints on port 8081 without authentication even when Basic Auth protects /api/v1/ on port 8080, allowing unauthenticated GET /env...
PT-2026-70265
Genkit does not properly validate host request headers. Any host on the developer's network, and any website the developer visits via DNS rebinding, can reach POST /api/runAction on the Dev UI server default port 4000 and execute any registered Genkit action and read the result. Fixed on 2026-06-...
PT-2026-70844
Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds to all interfaces on port 3444, permits cross-origin requests, and requires no authentication. The...
PT-2026-70738
Name of the Vulnerable Software and Affected Versions Windows Package Manager affected versions not specified Description Improper privilege management allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that...
PT-2026-70357
Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX CODE ONLY mode, the engine loads the compiled user module with importFresh, a wrapper around Node.js require, before the V8 isolate is applied. Top-level module code can therefore call require'child...
PT-2026-70463
Name of the Vulnerable Software and Affected Versions Microsoft Digest Authentication affected versions not specified Description A numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally. This issue enables attackers to gain...
PT-2026-70567
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description A relative path traversal issue allows an authorized attacker to disclose sensitive information over a network. Path traversal is a technique that allows an attacker to...
PT-2026-70294
Name of the Vulnerable Software and Affected Versions LLM Scaler software affected versions not specified Description A protection mechanism failure within Ring 3 the least privileged level of the CPU architecture where user applications run may allow an escalation of privilege. A local,...
PT-2026-70174
n8n before 2.32.1 and before 2.31.5 is vulnerable to account takeover via the Token Exchange Embed Login feature. When a validly-signed incoming token was matched to a local account by its email claim, the service did not verify that the email claim was verified, nor that the trusted key's...
PT-2026-76023
Type field in restricted TLS certificate allows privilege escalation in github.com/canonical/lxd...
PT-2026-70170
n8n versions before 2.32.1 contain a server-side request forgery protection bypass vulnerability in the MCP Client node that allows authenticated users to bypass SSRF protections. Attackers can craft workflows that send requests to internal or blocked hosts without routing through SSRF protection...
PT-2026-71942
CVE-2023-54370 - Rejected reason: This CVE ID has been rejected. CVE ID :CVE-2023-54370 Published : Aug. 11, 2026, 3:17 p.m. | 14 minutes ago Description :Rejected reason: This CVE ID has been rejected. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products,...
PT-2026-70693
Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network...
PT-2026-71891
CVE-2023-54367 - Rejected reason: This CVE ID has been rejected. CVE ID :CVE-2023-54367 Published : Aug. 11, 2026, 3:17 p.m. | 14 minutes ago Description :Rejected reason: This CVE ID has been rejected. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products,...
PT-2026-70070
Name of the Vulnerable Software and Affected Versions Axis Communications ACAP affected versions not specified Description An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This issue is exploitable only if the device is configured to allow t...