Local privilege escalation due to insecure file permissions. The following products are affected:...
CVE-2026-87886
Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin
#advisory
共收录 23421 条相关情报。
← 返回所有主题redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser...
CVE-2026-93435
redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious
The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-2585
The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘rootAttributes’ para
Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate...
CVE-2026-85917
Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a netw
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for...
CVE-2026-18441
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to I
Improper neutralization of input during web page generation ('cross-site scripting') in Azure...
CVE-2026-83946
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthori
Authorization bypass through user-controlled key in Microsoft Container Registry allows an...
CVE-2026-69865
Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elev
Improper neutralization of special elements used in a command ('command injection') in M365...
CVE-2026-85885
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic...
CVE-2026-70200
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorize
Azure Arc Elevation of Privilege Vulnerability
CVE-2026-69399
Azure Arc Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc...
CVE-2026-70009
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attac
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to...
CVE-2026-77903
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a ne
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges...
CVE-2026-83944
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker...
CVE-2026-85889
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges o
Rejected reason: reserved but not needed
CVE-2026-78668
Rejected reason: reserved but not needed
Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose...
CVE-2026-68791
Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network
Improper neutralization of special elements used in a command ('command injection') in Microsoft...
CVE-2026-55946
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut
Improper neutralization of special elements used in a command ('command injection') in Microsoft...
CVE-2026-78501
Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business
A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of...
CVE-2026-93307
A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Coll
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-65323
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.