home.social

Search

308 results for “CV”

  1. EUVD Bot @[email protected]

    🚨 EUVD-2025-211200

    📊 Score: 7.7/10 (CVSS v3.1)
    📦 Product: SecureConnector
    🏢 Vendor: Forescout Technologies
    📅 Published: 2026-10-26 | Updated: 2026-10-27

    📝 A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some ent...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  2. EUVD Bot @[email protected]

    🚨 EUVD-2026-106832

    📊 Score: 5.3/10 (CVSS v3.1)
    📦 Product: Oracle Essbase
    🏢 Vendor: Oracle Corporation
    📅 Published: 2026-10-20 | Updated: 2026-10-27

    📝 Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compro...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  3. EUVD Bot @[email protected]

    🚨 EUVD-2026-106833

    📊 Score: 5.6/10 (CVSS v3.1)
    📦 Product: Oracle Essbase
    🏢 Vendor: Oracle Corporation
    📅 Published: 2026-10-20 | Updated: 2026-10-27

    📝 Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3, IIOP to ...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  4. EUVD Bot @[email protected]

    🚨 EUVD-2026-110831

    📊 Score: 7.7/10 (CVSS v3.1)
    📦 Product: Umbraco-CMS, Umbraco-CMS
    🏢 Vendor: umbraco
    📅 Updated: 2026-10-27

    📝 Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by poisoning the Host header. Attackers send signed-in users aut...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  5. EUVD Bot @[email protected]

    🚨 EUVD-2026-106835

    📊 Score: 5.3/10 (CVSS v3.1)
    📦 Product: Oracle Essbase
    🏢 Vendor: Oracle Corporation
    📅 Published: 2026-10-20 | Updated: 2026-10-27

    📝 Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  6. EUVD Bot @[email protected]

    🚨 EUVD-2026-110834

    📊 Score: 5.3/10 (CVSS v3.1)
    📦 Product: zchunk
    🏢 Vendor: zchunk
    📅 Updated: 2026-10-27

    📝 zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose header ends...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  7. Daily CyberSecurity @[email protected]

    Details and PoC exploit code are out for CVE-2026-115905, a critical 10.0 CVSS Rust zip crate vulnerability. Upgrade to version 9.0.5 immediately.

    #Rust #ZipCrate #CVE2026115905 #PoC #RCE #Cybersecurity #Vulnerability #InfoSec

    meterpreter.org/rust-zip-crate

    #rust #zipcrate #cve2026115905 #poc #rce #cybersecurity
  8. SIGINT 🛡️🤖 @sigint

    🐧 SIGINT // Ubuntu Watch — 2026-10-27

    Two PHP CVEs, and this is the one with actual commands. It covers Ubuntu, Debian, Docker and panels, plus the lagging-mirror trap: check apt-cache policy php8.3-fpm before assuming you're patched. Docker images need a rebuild, not just apt upgrade.

    🔗 massivegrid.com/blog/how-to-pa

    #ubuntu #linux #infosec
  9. EUVD Bot @[email protected]

    🚨 EUVD-2026-56290

    📊 Score: 8.8/10 (CVSS v3.1)
    📦 Product: Microsoft Teams for Android
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  10. EUVD Bot @[email protected]

    🚨 EUVD-2026-56289

    📊 Score: 7.8/10 (CVSS v3.1)
    📦 Product: Visual Studio Code
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  11. EUVD Bot @[email protected]

    🚨 EUVD-2026-56293

    📊 Score: 8.8/10 (CVSS v3.1)
    📦 Product: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over ...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  12. EUVD Bot @[email protected]

    🚨 EUVD-2026-56292

    📊 Score: 4.6/10 (CVSS v3.1)
    📦 Product: Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Server 2019
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform ...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  13. EUVD Bot @[email protected]

    🚨 EUVD-2026-56295

    📊 Score: 8.8/10 (CVSS v3.1)
    📦 Product: Microsoft SharePoint Server 2019, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server Subscription Edition
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code o...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  14. EUVD Bot @[email protected]

    🚨 EUVD-2026-56294

    📊 Score: 6.5/10 (CVSS v3.1)
    📦 Product: Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information ove...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  15. EUVD Bot @[email protected]

    🚨 EUVD-2026-63691

    📊 Score: 8.6/10 (CVSS v3.1)
    📦 Product: Azure Stack HCI
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-20 | Updated: 2026-10-26

    📝 Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  16. EUVD Bot @[email protected]

    🚨 EUVD-2026-63693

    📊 Score: 10.0/10 (CVSS v3.1)
    📦 Product: Microsoft Entra
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-20 | Updated: 2026-10-26

    📝 Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  17. EUVD Bot @[email protected]

    🚨 EUVD-2026-63692

    📊 Score: 9.9/10 (CVSS v3.1)
    📦 Product: Microsoft Entra
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-20 | Updated: 2026-10-26

    📝 Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  18. EUVD Bot @[email protected]

    🚨 EUVD-2026-56299

    📊 Score: 6.5/10 (CVSS v3.1)
    📦 Product: Microsoft Dynamics 365 Business Central Release Wave 1 2025, Microsoft Dynamics 365 Business Central 2024 Release Wave 2, Microsoft Dynamics 365 Business Central 2026 Release Wave 1 (+1 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Missing authorization in Dynamics Business Centr...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  19. EUVD Bot @[email protected]

    🚨 EUVD-2026-67846

    📊 Score: 5.4/10 (CVSS v3.1)
    📦 Product: Microsoft Edge (Chromium-based), Microsoft Edge for iOS
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-28 | Updated: 2026-10-26

    📝 Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  20. EUVD Bot @[email protected]

    🚨 EUVD-2026-56300

    📊 Score: 7.5/10 (CVSS v3.1)
    📦 Product: Windows 11 Version 23H2, Windows 10 Version 1809, Windows 10 Version 1607 (+14 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  21. EUVD Bot @[email protected]

    🚨 EUVD-2026-56303

    📊 Score: 7.4/10 (CVSS v3.1)
    📦 Product: PowerShell 7.6, PowerShell 7.5, PowerShell 7.4
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  22. EUVD Bot @[email protected]

    🚨 EUVD-2026-56302

    📊 Score: 8.8/10 (CVSS v3.1)
    📦 Product: Windows 10 Version 1809, Windows 10 Version 22H2, Windows 11 Version 23H2 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute ...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  23. EUVD Bot @[email protected]

    🚨 EUVD-2026-56301

    📊 Score: 7.8/10 (CVSS v3.1)
    📦 Product: Windows 11 Version 23H2, Windows 10 Version 1809, Windows Server 2025 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  24. EUVD Bot @[email protected]

    🚨 EUVD-2026-56305

    📊 Score: 7.2/10 (CVSS v3.1)
    📦 Product: Azure Monitor Agent Linux Extension
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  25. EUVD Bot @[email protected]

    🚨 EUVD-2026-56306

    📊 Score: 6.5/10 (CVSS v3.1)
    📦 Product: Visual Studio Code
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  26. EUVD Bot @[email protected]

    🚨 EUVD-2026-56309

    📊 Score: 5.5/10 (CVSS v3.1)
    📦 Product: Windows Server 2016 (Server Core installation), Windows 11 Version 25H2, Windows 11 Version 23H2 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  27. EUVD Bot @[email protected]

    🚨 EUVD-2026-56307

    📊 Score: 9.8/10 (CVSS v3.1)
    📦 Product: Microsoft HPC Pack 2019
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  28. EUVD Bot @[email protected]

    🚨 EUVD-2026-56312

    📊 Score: 7.5/10 (CVSS v3.1)
    📦 Product: Windows Server 2025, Windows Server 2012, Windows 10 Version 21H2 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  29. EUVD Bot @[email protected]

    🚨 EUVD-2026-56311

    📊 Score: 5.6/10 (CVSS v3.1)
    📦 Product: Windows Server 2025, Windows 10 Version 22H2, Windows Server 2016 (+14 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  30. EUVD Bot @[email protected]

    🚨 EUVD-2026-56313

    📊 Score: 5.5/10 (CVSS v3.1)
    📦 Product: Windows Server 2012, Windows 10 Version 1809, Windows Server 2016 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
Next page
Share on Mastodon

Enter the server where you have an account.