The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripti

未知

Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies R

未知

CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cau

未知

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected

未知

Buffer Overflow vulnerability in Uderzo Software SpaceSniffer v.2.0.5.18 allows a remote attacker to

未知

External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized

microsoft azure_ad_ssh_login_extension_for_linux

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

microsoft 365_apps

Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally.

microsoft azure_automation_hybrid_worker_windows_extension

Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileg

microsoft office

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

未知

Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally.

未知

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker

未知

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges lo

未知

Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.

未知

Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform

microsoft azure_iot_explorer

Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate priv

microsoft azure_mcp_server microsoft azure_mcp_server

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allo

microsoft arc_enabled_servers_azure_connected_machine_agent

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a

microsoft sql_server_2016 microsoft sql_server_2017 +3个

Improper validation of specified type of input in SQL Server allows an authorized attacker to elevat

microsoft sql_server_2016 microsoft sql_server_2017 +3个

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

microsoft sharepoint_server microsoft sharepoint_server