Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges...
CVE-2026-70178
Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.
#advisory
共收录 23717 条相关情报。
← 返回所有主题A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability...
CVE-2026-85225
A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code o
MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that...
CVE-2026-85427
MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated at
A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown...
CVE-2026-85223
A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /
A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown...
CVE-2026-85224
A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/file
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an...
CVE-2026-62916
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevat
Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate...
CVE-2026-65818
Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio...
CVE-2026-62906
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized att
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker...
CVE-2026-69857
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing ov
A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4....
CVE-2026-18330
A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who capt
A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55...
CVE-2026-18167
A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is e
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user...
CVE-2026-64196
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user...
CVE-2026-64199
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user...
CVE-2026-64198
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user...
CVE-2026-64200
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results
There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user...
CVE-2026-64195
There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Success
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user...
CVE-2026-64197
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in
CVE-2026-75429
CVE-2026-75429
PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/proces
SiYuan: Missing publish-access filter on getAttributeViewKeysByID discloses database column schema, plus two unscoped block-ID enumeration oracles (publish mode)
CVE-2026-72800
**CVE:** This vulnerability corresponds to [CVE-2026-72800](https://nvd.nist.gov/vuln/detail/CVE-2026-72800). ### Summa
SiYuan: Encrypted-notebook key-derivation material and wrapped notebook keys disclosed to anonymous readers, enabling offline master-password cracking
CVE-2026-72801
**CVE:** This vulnerability corresponds to [CVE-2026-72801](https://nvd.nist.gov/vuln/detail/CVE-2026-72801). ### Summa