CVE Brief Security Intelligence

An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS version 6

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network

Due to broken authorization, SAP Business One (SLD) allows an authenticated attacker to gain administrator privileges of a database by invoking the corresponding API

The WooCommerce Purchase Orders plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_file() function in all versions up to, and including, 1

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally

Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally

The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all versions up to, and including, 1

Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network

Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network

Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network

Adobe Commerce versions 2

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station

Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally

Autocaliweb is a web app that offers an interface for browsing, reading, and downloading eBooks using a valid Calibre database

Adobe Commerce versions 2

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges over a network

Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally

Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally

Improper handling of insufficient permissions or privileges in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally

Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally

A improper handling of parameters in Fortinet FortiWeb versions 7

Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2

Stirling-PDF is a locally hosted web application that performs various operations on PDF files

Stirling-PDF is a locally hosted web application that performs various operations on PDF files

Stirling-PDF is a locally hosted web application that performs various operations on PDF files

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network

Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network

Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally

A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801

A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801

A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801

A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801

A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801

A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801

A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801

Vim is an open source, command line text editor

Vim is an open source, command line text editor

Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network

Catalyst::Authentication::Credential::HTTP versions 1

in OpenHarmony v5

in OpenHarmony v5

in OpenHarmony v5

in OpenHarmony v5

A vulnerability has been identified in SINUMERIK 828D PPU

A vulnerability has been identified in SIMATIC PCS neo V4

Improper check for unusual or exceptional conditions in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1

SAP NetWeaver Application Server ABAP (BIC Document) allows an authenticated attacker to craft a request that, when submitted to a BIC Document application, could cause a memory corruption error

Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties

Cherry Studio is a desktop client that supports for multiple LLM providers

Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processor with Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access

A low-privileged local attacker can exploit improper permissions on nssm

The affected setup component is vulnerable to DLL hijacking

A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions), SIMATIC STEP 7 V18 (All versions), SIMATIC STEP 7 V19 (All versions < V19 Update 4), SIMATIC STEP 7 V20 (All versions), SIMATIC WinCC V17 (All versions), SIMATIC WinCC V18 (All versions), SIMATIC WinCC V19 (All versions < V19 Update 4), SIMATIC WinCC V20 (All versions), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOCODE ES V20 (All versions), SIMOTION SCOUT TIA V5

A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406

A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3

Time-of-check Time-of-use race condition for some Intel(R) Connectivity Performance Suite software installers before version 40

Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access

Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1

Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1

Improper check for unusual or exceptional conditions in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1

Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1

Improper input validation in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2

Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2

Illustrator versions 28

Illustrator versions 28

Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorized attacker to execute code locally