Microsoft

Improper authorization in Azure allows an authorized attacker to elevate privileges over a network.

Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network.

Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network.

Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. Accordi

IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical erro

IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user

The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent insta

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF). This may allow an auth

NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by rem

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a r

NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote co

IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity

IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure w

Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potential

Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network.

IBM Aspera Console 3.4.0 through 3.4.4 allows passwords to be reused when a new user logs into the system.

IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in furthe

IBM Aspera Console 3.4.0 through 3.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker

IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed

IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to HTTP header injection, caused by improper validation of input

Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an auth

IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another u

IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows use

In affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending server-side requests th

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds write vulnerability that could res

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that cou

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Stack-based Buffer Overflow vulnerability that co

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds write vulnerability that could res

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerabi

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that cou

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security fe

Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose i

Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a n

Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.

Improper input validation in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a n

Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature

Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized atta

Exposure of sensitive information to an unauthorized actor in Outlook for Android allows an unauthorized attacker to dis

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.