Improper access control in Azure Logic Apps allows an authorized attacker to disclose information...
CVE-2026-56161
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
#severity:critical
共收录 1468 条相关情报。
← 返回所有主题Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate...
CVE-2026-59118
Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute...
CVE-2026-50515
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an...
CVE-2026-62873
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevat
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate...
CVE-2026-56162
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized...
CVE-2026-50481
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privile
Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter...
CVE-2026-70558
Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new File(path)
Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-layer/mqtt/mqtt.c sets...
CVE-2026-5857
Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-layer/mqtt/mqtt.c sets topic_len_received=1 before checking
Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery...
CVE-2026-53983
Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital
Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...
CVE-2026-19170
Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially per
The System REST API accepts user-supplied file uploads without enforcing sufficient validation on...
CVE-2026-3418
The System REST API accepts user-supplied file uploads without enforcing sufficient validation on the file type or desti
llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache...
CVE-2026-43629
llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restore path whe
llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the...
CVE-2026-43631
llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-se
llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama...
CVE-2026-43632
llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six to
MaxSite CMS contains a PHP object injection vulnerability that allows unauthenticated attackers...
CVE-2026-70554
MaxSite CMS contains a PHP object injection vulnerability that allows unauthenticated attackers to execute arbitrary cod
MaxSite CMS 109.5 and earlier contains an authentication bypass vulnerability in the AJAX...
CVE-2026-70552
MaxSite CMS 109.5 and earlier contains an authentication bypass vulnerability in the AJAX dispatcher that allows unauthe
MaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers...
CVE-2026-70553
MaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers to inject arbitrary PHP
Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An...
CVE-2026-49435
Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote att
Atlas-Livre contains an improper access control vulnerability in the admin controllers under...
CVE-2026-69703
Atlas-Livre contains an improper access control vulnerability in the admin controllers under Espace_admin/controleur/ th
Keysight IxChariot Endpoint before 9.5.102 contains a stack-based buffer overflow. An...
CVE-2017-20242
Keysight IxChariot Endpoint before 9.5.102 contains a stack-based buffer overflow. An unauthenticated remote attacker ca