CVE-2026-34502 Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client
Information published.
EPSS 0.01 CVE-2026-34502 Apache US
Výsledky hledání
7
CVE-2026-34501 Apache Portable Runtime Utility: Heap buffer overflow in APR redis client
Information published.
EPSS 0.01 CVE-2026-34501 Apache US
CVE-2026-34191 Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle
Information published.
EPSS 0.00 CVE-2026-34191 Apache US
CVE-2025-49506 Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack
Information published.
EPSS 0.00 CVE-2025-49506 Apache US
CVE-2026-47243 Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs
Information published.
EPSS 0.00 CVE-2026-47243 US
CVE-2026-64676 Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory
Information published.
EPSS 0.00 CVE-2026-64676 Kata Containers US
CVE-2026-50540 Kata Containers: Config Path Annotation Arbitrary File Loading
Information published.
EPSS 0.00 CVE-2026-50540 Kata Containers US
1
CVE-2025-62725 Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations
Information published.
EPSS 0.14 CVE-2025-62725 Docker US
12
CVE-2026-43871 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit
Information published.
EPSS 0.01 CVE-2026-43871 Apache US
CVE-2026-55969 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()
Information published.
EPSS 0.01 CVE-2026-55969 Apache US
CVE-2026-55995 Double-free in the iSNS attribute decoder in open-iscsi
Information published.
EPSS 0.00 CVE-2026-55995 open-iscsi US
CVE-2026-44944 iscsiuio control-socket authentication bypass in open-iscsi
Information published.
EPSS 0.00 CVE-2026-44944 open-iscsi US
CVE-2026-44943 remote limited file-write as root via discovery in open-iscsi
Information published.
EPSS 0.00 CVE-2026-44943 US
CVE-2019-9924 rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.
Information published.
EPSS 0.00 CVE-2019-9924 Bash US
CVE-2010-4052 Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent repetition operators, as demonstrated by a {10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD.
Information published.
EPSS 0.51 CVE-2010-4052 US
CVE-2018-6829 cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for Libgcrypt's ElGamal implementation.
Information published.
EPSS 0.02 CVE-2018-6829 Libgcrypt US
CVE-2026-54332 GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS
Information published.
EPSS 0.00 CVE-2026-54332 GoPacket US
CVE-2026-6879 Quadratic Behavior in xml.etree.ElementPath Index Predicates
Information published.
EPSS 0.00 CVE-2026-6879 US
CVE-2018-1128 It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
Information published.
EPSS 0.01 CVE-2018-1128 Ceph US
CVE-2018-5407 Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
Information published.
EPSS 0.03 CVE-2018-5407 US
20
CVE-2026-62873 Microsoft 365 Admin Center Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-62873 Microsoft US
CVE-2026-63508 Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability
Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-63508 Microsoft US
CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-63522 US
CVE-2026-62869 Azure Entra ID Spoofing Vulnerability
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-62869 US
CVE-2026-50515 Azure Service Bus Remote Code Execution Vulnerability
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-50515 telekomunikace US
CVE-2026-56162 Azure SQL Database Elevation of Privilege Vulnerability
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-56162 US
CVE-2026-65667 Microsoft Teams Elevation of Privilege Vulnerability
Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-65667 Microsoft US
CVE-2026-62830 Azure SRE Agent Elevation of Privilege Vulnerability
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-62830 US
CVE-2026-56161 Azure Logic Apps Information Disclosure Vulnerability
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
EPSS 0.00 CVE-2026-56161 US
CVE-2026-70332 Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-70332 Microsoft US
CVE-2026-68823 Azure Confidential Ledger Remote Code Execution Vulnerability
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-68823 finance US
CVE-2026-49163 Application Insights Profiler Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-49163 US
CVE-2026-59115 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-59115 Microsoft US
CVE-2026-62918 Microsoft Teams Spoofing Vulnerability
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.00 CVE-2026-62918 Microsoft US
CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-50481 veřejná správa US
CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-50516 Microsoft veřejná správa telekomunikace finance výroba a průmysl US
CVE-2026-65668 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-65668 Microsoft US
CVE-2026-62896 Microsoft Teams Elevation of Privilege Vulnerability
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
EPSS 0.00 CVE-2026-62896 Microsoft US
CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.00 CVE-2026-62836 finance US
CVE-2026-59118 Microsoft Power Apps Elevation of Privilege Vulnerability
Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.00 CVE-2026-59118 Microsoft US
1
CVE-2026-66803 Azure Cosmos DB Remote Code Execution Vulnerability
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-66803 US
4
CVE-2026-59677 Process Kill Attack Vector in killall() in seunshare
Information published.
EPSS 0.00 CVE-2026-59677 US
CVE-2026-59676 Local File Deletion Attack Vector in rm_rf() in seunshare
Information published.
EPSS 0.00 CVE-2026-59676 US
CVE-2026-32597 PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)
Information published.
EPSS 0.00 CVE-2026-32597 PyJWT US
CVE-2026-8450 HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()
Information published.
EPSS 0.01 CVE-2026-8450 HTTP::Daemon US
15
CVE-2026-58275 Azure DNS Elevation of Privilege Vulnerability
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-58275 US
CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.00 CVE-2026-58630 US
CVE-2026-62825 Azure Key Vault Elevation of Privilege Vulnerability
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-62825 US
CVE-2026-57106 Data Quality Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.00 CVE-2026-57106 US
CVE-2026-56191 Microsoft Exchange Online Tampering Vulnerability
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.
EPSS 0.01 CVE-2026-56191 Microsoft US
CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-50517 Microsoft US
CVE-2026-49159 Microsoft Graph Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-49159 Microsoft US
CVE-2026-35425 Azure API Management (APIM) Remote Code Execution Vulnerability
Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-35425 US
CVE-2026-56160 Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-56160 Red Hat US
CVE-2026-54120 Microsoft Surface Remote Code Execution Vulnerability
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-54120 Microsoft US
CVE-2026-56165 Microsoft Account Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-56165 Microsoft US
CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.00 CVE-2026-56163 Microsoft US
CVE-2026-56167 Azure AI Search Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.
EPSS 0.00 CVE-2026-56167 US
CVE-2026-62835 Online Services Information Disclosure Vulnerability
Improper authorization in Online Services allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-62835 US
CVE-2026-15788 WCOW cache mount source selector resolves NTFS junctions outside of cache root
Information published.
EPSS 0.00 CVE-2026-15788 US