Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free...
CVE-2026-16005
Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a craft
#severity:medium
共收录 5476 条相关情报。
← 返回所有主题Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to...
CVE-2026-16004
Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary P
Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a...
CVE-2026-75811
Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify har
Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to...
CVE-2026-75808
Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-serv
A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote...
CVE-2026-12962
A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local
Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief...
CVE-2026-75810
Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing
Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a...
CVE-2026-18023
Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose
Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate...
CVE-2026-16006
Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user t
SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated...
CVE-2026-76968
SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacke
Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and...
CVE-2026-76971
Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker
Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP...
CVE-2026-76963
Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated att
SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist...
CVE-2026-76977
SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist. An unauthenticated at
SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within...
CVE-2026-76962
SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functional
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request...
CVE-2026-76959
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on c
SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user...
CVE-2026-44766
SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to inject malicious in
knowns through 0.33.0 contains a server-side request forgery vulnerability in the POST /api...
CVE-2026-86539
knowns through 0.33.0 contains a server-side request forgery vulnerability in the POST /api/embedding-models/test endpoi
Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload...
CVE-2026-86436
Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload endpoints, allowing aut
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge...
CVE-2026-86495
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccess
In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication...
CVE-2026-86497
In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administra
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to...
CVE-2026-86493
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteb