106,821 results · Clear filters · Feed
-
Medium 5.5
AMD Zen Information Disclosure Vulnerability
Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Raw Image Extension Information Disclosure Vulnerability
Buffer over-read in Windows Raw Image Extension allows an unauthorized attacker to disclose information locally.
-
Medium 6.8
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.8
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.5
Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
-
Medium 5.5
Windows Overlay Filter Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Overlay Filter allows an authorized attacker to disclose information locally.
-
Medium 5.3
Windows Active Directory Certificate Services Security Feature Bypass
Improper certificate validation in Windows Active Directory Certificate Services allows an authorized attacker to bypass a security feature over a network.
-
Medium 6.4
Windows DHCP Server Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Inventory Backup Information Disclosure Vulnerability
Use of externally-controlled format string in Windows Inventory Backup allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows Shell Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.
-
Medium 5.8
pgEdge Go LLM Library provides a unified Go interface for multiple LLM providers with streaming, tool calling, retries,…
-
Medium 5.8
pgEdge RAG Server discloses part of the configured provider credential through API error messagespgEdge RAG Server discloses part of the configured provider credential through API error messages
pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the unauthenticated query API in internal/server/handlers.go returns err.Error() from failed LLM provider calls, preserving provider-…
-
Medium 5.9
pgEdge RAG Server shared keyword index leaked results between concurrent unauthenticated requests
pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the BM25 keyword index is a single per-pipeline object shared by the unauthenticated query endpoint, and concurrent requests lock its…
-
Medium 4.3
NocoBase: SSRF in customRequests:send via runtime options.url override
NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Versions 2.1.0 through 2.1.14 contain a server-side request forgery vulnerability in the customRequests:send endpoint. A low-privileged authentica…
-
Medium 6.5
pgEdge Postgres MCP Server SQL injection in the count_rows where parameter
pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the where parameter of the count_rows tool accepted subqueries against tables other than the table named in the tool…
-
Medium 6.5
pgEdge Postgres MCP Server login rate limiting can be evaded by a caller-supplied header
pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, deployments exposing the nondefault HTTP transport with authentication enabled used the leftmost caller-supplied X-F…
-
Medium 6.7
Improper Handling of Highly Compressed Data (CWE-409) in the ZIP loader of whatstk from 0.7.0 before 0.9.0 allows a par…
-
Medium 5.3
pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible c…
-
Medium 4.7
Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside …
-
Medium 4.7
Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outsid…
-
Medium 5.1
Gwenhywfar 5.14.2 contains a heap use-after-free vulnerability in GWEN_TLV_Buffer_To_DB() in src/parser/tlv.c, which fr…
-
Medium 5.1
Gwenhywfar 4.99.8beta before 5.14.2 contains a stack-based buffer overflow in GWEN_TLV_Buffer_To_DB() in src/parser/tlv…
-
Medium 5.3
compose-lint: Text in a pull request can still issue CI workflow commands through compose-lint 0.31.0's output
compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. In version 0.31.0, compose-lint escapes GitHub Actions workflow-command openers only after ASCII spaces and tabs, while the runner strips all leadi…
-
Medium 5.0
Group-Office is an enterprise customer relationship management and groupware tool. Prior to version 26.0.37, go/modules…
-
Medium 5.3
Prevent shadowing stdlib in gzip/tarfile/zipfile CLI during extraction
When tarfile or zipfile command line interface (CLI) is used to decompress an archive, a Python script shadowing the stdlib can be created. Then if an error occurs during decompressing the next file, the newly created Python script is executed. This is especi…
-
Medium 5.4
Uncontrolled search path for some Intel(R) Graphics Software before version 26.14.2303.1 within Ring 3: User Applicatio…
-
Medium 5.4
Uncontrolled search path for the libva software for all versions within Ring 3: User Applications may allow an escalati…
-
Medium 4.8
Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User A…
-
Medium 4.8
Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User A…
-
Medium 5.4
Uncontrolled search path for some Intel(R) Application Optimization User Interface within Ring 3: User Applications may…
-
Medium 5.8
Integer overflow to buffer overflow for some Intel(R) oneAPI Deep Neural Network Library (oneDNN) software before versi…
-
Medium 4.8
Uncaught exception for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may…
-
Medium 4.8
Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User A…
-
Medium 5.9
Improper certificate validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications ma…
-
Medium 4.8
Improper input validation for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applicati…
-
Medium 6.8
Improper resource locking for the Intel(R) NPU Drivers before version 32.0.100.4778 within Ring 1: Device Drivers may a…
-
Medium 5.4
Protection mechanism failure for some Intel Neural Compressor software before version master within Ring 3: User Applic…
-
Medium 6.0
Joomla Extension - j2commerce.com - Gift voucher and single-use coupon could pay for more than one order in J2Store 6.0…
-
Medium 5.7
Panic on a GCP launch endorsement without TDX measurements
Improper input validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial o…