180307 matches found
CVE-2026-86806 opengeos GeoLibre _is_within_roots server-side request forgery
A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function iswithinroots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recommended to address this issue. Patch name:...
CVE-2026-86716 Cesanta mJS mjs_tok.c skip_spaces_and_comments heap-based overflow
A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skipspacesandcomments of the file src/mjstok.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The...
CVE-2026-66307 Skype for Business and Lync Denial of Service Vulnerability
...
CVE-2026-66303 Skype for Business and Lync Denial of Service Vulnerability
...
CVE-2026-66306 Skype for Business Information Disclosure Vulnerability
...
CVE-2026-66308 Skype for Business and Lync Denial of Service Vulnerability
...
CVE-2026-79721
Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...
CVE-2026-77109 Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction. Scope is changed...
CVE-2026-76202 Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user interaction...
CVE-2026-77774 Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope i...
CVE-2026-58839
In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-58823
In stpropnciprocessstd of stpropncistd.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-58822
In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-55294
In ihevcdgettudatasize of ihevcdutils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-55277
In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-49932
In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-49927
In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-86673 ningzichun Student Management System Database Connection database.php mysqli_connect hard-coded credentials
A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function mysqliconnect of the file config/database.php of the component Database Connection. This manipulation causes hard-coded credentials. The...
CVE-2026-81821 AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key
The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information...
CVE-2026-81822 AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm
The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing of weak hashes, potentially allowing elevation to a PIMBoards administrator user...
CVE-2026-81823 AVEVA Pipeline Integrity Monitor Missing Authorization
The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are not impacted...
CVE-2026-81824 AVEVA Pipeline Integrity Monitor cross-site scripting
The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link...
CVE-2026-79904 Photoshop Mobile | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intende...
CVE-2026-62804 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-83501 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
...
CVE-2026-85875 Microsoft Office Excel Information Disclosure Vulnerability
...
CVE-2026-83989 Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability
...
CVE-2026-83983 Windows Biometric Service Elevation of Privilege Vulnerability
...
CVE-2026-83973 Windows Biometric Service Elevation of Privilege Vulnerability
...
CVE-2026-83968 Windows Biometric Service Elevation of Privilege Vulnerability
...
CVE-2026-72965 Windows WebClient Service Elevation of Privilege Vulnerability
...
CVE-2026-69530 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
...
CVE-2026-83949 Microsoft Office Word Information Disclosure Vulnerability
...
CVE-2026-83951 Microsoft Office Word Information Disclosure Vulnerability
...
CVE-2026-81963 Windows Update Stack Elevation of Privilege Vulnerability
...
CVE-2026-57099 ASP.NET Core Denial of Service Vulnerability
...
CVE-2026-83940 Windows Device Association Service Elevation of Privilege Vulnerability
...
CVE-2026-81950 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-81955 Windows Graphics Component Remote Code Execution Vulnerability
...
CVE-2026-81395 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2026-81960 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-81400 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2026-81958 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2026-81401 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2026-81399 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2026-81391 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2026-81390 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2026-81387 Microsoft Excel Information Disclosure Vulnerability
...