CVE Brief Security Intelligence

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network

Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network

Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network

The Royal Addons for Elementor plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 1

Adobe Commerce versions 2

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network

External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally

Adobe Commerce versions 2

Adobe Commerce versions 2

Adobe Commerce versions 2

Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally

Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally

Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network

Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a network

Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android

A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally

A vulnerability in Apache Airflow allows a user with database access to execute arbitrary code on the Triggerer component by crafting a malicious database entry.

Memory safety bugs present in Firefox 148

A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7

The ProfilePress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4

A security issue was discovered in ingress-nginx where the `nginx

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally

External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally

Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally

Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally

Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira)

An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8

A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7

A stack-based buffer overflow in the ubr-network method of the wwwubr service allows low-privileged remote attackers to achieve full device compromise via a crafted POST request.

A vulnerability was found in Tenda FH1202 1

Dependency on vulnerable third-party component in GitHub Repo: zero-shot-scfoundation allows an unauthorized attacker to execute code over a network

OneUptime is a solution for monitoring and managing online services

Illustrator versions 29

A low-privileged remote attacker can abuse the backup restore functionality of UBR (ubr-restore) which runs with elevated privileges and does not validate the contents of the backup archive to create or overwrite arbitrary files anywhere on the system

A low-privileged remote attacker can exploit an arbitrary file write vulnerability in the wwupload

A vulnerability in the command parameters of a certain AOS-CX CLI command could allow a low-privilege authenticated remote attacker to inject malicious commands resulting in unwanted behavior

MobaXterm versions prior to 26

An exposed dangerous method in Ivanti DSM before version 2026

A vulnerability in the ubr-editfile method of the wwwubr service allows low-privileged remote attackers to perform unauthorized file manipulations.

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network

An authenticated SQL Injection vulnerability (CWE-89) exists in the Koha staff interface in the /cgi-bin/koha/suggestion/suggestion

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally

Buffer Overflow vulnerability in Uderzo Software SpaceSniffer v

A high-severity vulnerability exists in the Budibase low-code platform, potentially allowing unauthorized access or manipulation of internal tools and workflows.

FileBrowser Quantum is a free, self-hosted, web-based file manager

A security flaw has been discovered in UTT HiPER 810G up to 1

A weakness has been identified in UTT HiPER 810G up to 1

By default, jailed processes cannot mount filesystems, including nullfs(4)

Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network

Improper restriction of names for files and other resources in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network

Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network

StudioCMS is a server-side-rendered, Astro native, headless content management system

A vulnerability in the `filestring()` function of the `nltk

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services

OliveTin gives access to predefined shell commands from a web interface

In multiple places, there is a possible out of bounds write due to memory corruption

In EfwApTransport::ProcessRxRing of efw_ap_transport

Sylius is an Open Source eCommerce Framework on Symfony

A high-severity vulnerability in ImageMagick's image processing logic could allow attackers to compromise systems that utilize the software for digital image manipulation.

A local attacker with low privileges can exploit the UBR service account to potentially escalate privileges or access sensitive system data within the Windows environment.

Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally

Incorrect default permissions in

iccDEV provides a set of libraries and tools for working with ICC color management profiles

iccDEV provides a set of libraries and tools for working with ICC color management profiles

iccDEV provides a set of libraries and tools for working with ICC color management profiles

iccDEV provides a set of libraries and tools for working with ICC color management profiles

iccDEV provides a set of libraries and tools for working with ICC color management profiles

iccDEV provides a set of libraries and tools for working with ICC color management profiles

iccDEV provides a set of libraries and tools for working with ICC color management profiles

iccDEV provides a set of libraries and tools for working with ICC color management profiles

Premiere Pro versions 25

Substance3D - Stager versions 3

Substance3D - Stager versions 3