апрель 2026 г.

Microsoft SharePoint Server Spoofing Vulnerability

• Без аутентификации

microsoft · sharepoint server14 апр. 2026 г.

Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

• pre-auth RCE
• Ошибки памяти

microsoft · windows 10 160714 апр. 2026 г.

Microsoft Defender Elevation of Privilege Vulnerability

• Локальное повышение привилегий

microsoft · defender antimalware platform14 апр. 2026 г.

Windows Shell Spoofing Vulnerability

• Без аутентификации

microsoft · windows 10 160714 апр. 2026 г.

Microsoft Power Apps Desktop Client Spoofing Vulnerability

microsoft · power apps14 апр. 2026 г.

Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability

• Без аутентификации
• Ошибки памяти

microsoft · windows 10 160714 апр. 2026 г.

Remote Desktop Client Remote Code Execution Vulnerability

• pre-auth RCE
• Ошибки памяти

microsoft · remote desktop client14 апр. 2026 г.

Azure Logic Apps Elevation of Privilege Vulnerability

• Утечка информации

microsoft · azure logic apps14 апр. 2026 г.

Windows Shell Security Feature Bypass Vulnerability

• Без аутентификации

microsoft · windows 10 160714 апр. 2026 г.

Microsoft SQL Server Remote Code Execution Vulnerability

• RCE

microsoft · sql server 201614 апр. 2026 г.

Windows Hello Security Feature Bypass Vulnerability

• Без аутентификации

microsoft · windows server 201614 апр. 2026 г.

Windows COM Elevation of Privilege Vulnerability

• Локальное повышение привилегий

microsoft · windows 10 180914 апр. 2026 г.

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

• pre-auth RCE
• Десериализация

adobe · connect14 апр. 2026 г.

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

• pre-auth RCE
• Десериализация

adobe · connect14 апр. 2026 г.

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

• Без аутентификации
• XSS

adobe · connect14 апр. 2026 г.

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

• Без аутентификации
• XSS

adobe · connect14 апр. 2026 г.

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

• Без аутентификации
• XSS

adobe · connect14 апр. 2026 г.

ColdFusion | Improper Input Validation (CWE-20)

• pre-auth RCE

adobe · coldfusion14 апр. 2026 г.

Adobe Framemaker | Untrusted Search Path (CWE-426)

• RCE

adobe · framemaker14 апр. 2026 г.

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

• Без аутентификации
• Обход пути

adobe · coldfusion14 апр. 2026 г.

Adobe Connect | Cross-site Scripting (XSS) (CWE-79)

• XSS

adobe · connect14 апр. 2026 г.

Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

• RCE
• Prototype pollution

adobe · acrobat14 апр. 2026 г.

Photoshop Installer | CWE-427: Uncontrolled Search Path Element

• RCE

adobe · photoshop installer15 апр. 2026 г.

ColdFusion | Improper Input Validation (CWE-20)

• RCE

adobe · coldfusion14 апр. 2026 г.

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3).

• Нарушение контроля доступа (IDOR)

siemens · sinec nms14 апр. 2026 г.

A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions < V5.8).

siemens · ruggedcom crossbow secure access manager primary (sam-p)14 апр. 2026 г.

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC).

• Без аутентификации
• Обход аутентификации
• Слабая криптография

siemens · sinec nms14 апр. 2026 г.

A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcente

• Без аутентификации
• Слабая криптография

siemens · simcenter 3d14 апр. 2026 г.

A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management Pro

• Без аутентификации
• Обход аутентификации

siemens · industrial edge management pro v114 апр. 2026 г.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause critical files o

• Обход пути

schneider-electric · powerchute serial shutdown14 апр. 2026 г.

CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the us

• Без аутентификации

schneider-electric · powerchute serial shutdown14 апр. 2026 г.

CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters t

• Без аутентификации

schneider-electric · powerchute serial shutdown14 апр. 2026 г.

CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unau

• Без аутентификации
• Зашитые учётные данные

schneider electric · easergy micom p14x14 апр. 2026 г.

CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application user credentials to re

schneider-electric · powerchute serial shutdown14 апр. 2026 г.

CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log truncation impacting lo

schneider-electric · powerchute serial shutdown14 апр. 2026 г.

CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of se

• Отказ в обслуживании

schneider-electric · powerchute serial shutdown14 апр. 2026 г.

CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information to be exposed when

• Утечка информации

schneider-electric · powerchute serial shutdown14 апр. 2026 г.

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Setup and Administration).

• Без аутентификации
• Обход аутентификации

oracle · advanced inbound telephony21 апр. 2026 г.

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management).

• Обход аутентификации

oracle · enterprise manager base platform21 апр. 2026 г.

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

• Без аутентификации
• Обход аутентификации

oracle · identity manager connector21 апр. 2026 г.

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

• Без аутентификации
• Обход аутентификации

oracle · identity manager connector21 апр. 2026 г.

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

• Без аутентификации
• Нарушение контроля доступа (IDOR)

oracle · identity manager connector21 апр. 2026 г.

Vulnerability in the Oracle Life Sciences Empirica Signal product of Oracle Life Science Applications (component: Common Core).

• Нарушение контроля доступа (IDOR)

oracle · life sciences empirica signal21 апр. 2026 г.

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core).

• Без аутентификации
• Нарушение контроля доступа (IDOR)

oracle · http server21 апр. 2026 г.

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security).

• Нарушение контроля доступа (IDOR)

oracle · peoplesoft enterprise peopletools21 апр. 2026 г.

Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces).

• Локальное повышение привилегий
• Нарушение контроля доступа (IDOR)

oracle · application development framework21 апр. 2026 г.

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com

• Без аутентификации
• Нарушение контроля доступа (IDOR)

oracle · financial services analytical applications infrastructure21 апр. 2026 г.

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch).

• Нарушение контроля доступа (IDOR)

oracle · applications dba21 апр. 2026 г.

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

• Без аутентификации
• Утечка информации

oracle · jre21 апр. 2026 г.