|
921
|
7.8 |
HIGH
Local
|
ashlar
|
argon cobalt cobalt_share lithium xenon
|
An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information o…
|
CWE-125
Out-of-bounds Read
|
CVE-2025-65087
|
2026-05-14 23:57 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
922
|
7.8 |
HIGH
Local
|
ashlar
|
argon cobalt cobalt_share lithium xenon
|
An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information o…
|
CWE-125
Out-of-bounds Read
|
CVE-2025-65088
|
2026-05-14 23:57 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
923
|
8.8 |
HIGH
Network
|
requarks
|
wiki.js
|
Wiki.js is an open source wiki app built on Node.js. Prior to 2.5.313, the users.update GraphQL mutation accepts an arbitrary groups array and applies it directly to the database with no validation o…
|
CWE-269 NVD-CWE-noinfo
Improper Privilege Management
|
CVE-2026-44224
|
2026-05-14 23:56 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
924
|
6.7 |
MEDIUM
Local
|
microsoft
|
windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…
|
Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.
|
CWE-415
Double Free
|
CVE-2026-21530
|
2026-05-14 23:56 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
925
|
7.5 |
HIGH
Adjacent
|
microsoft
|
windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute code over an adjacent net…
|
CWE-362 CWE-416
Race Condition Use After Free
|
CVE-2026-32161
|
2026-05-14 23:54 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
926
|
6.7 |
MEDIUM
Local
|
microsoft
|
windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…
|
Double free in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.
|
CWE-415
Double Free
|
CVE-2026-32170
|
2026-05-14 23:52 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
927
|
4.4 |
MEDIUM
Local
|
microsoft
|
windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…
|
Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.
|
CWE-284
Improper Access Control
|
CVE-2026-32209
|
2026-05-14 23:51 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
928
|
7.2 |
HIGH
Network
|
wftpserver
|
wing_ftp_server
|
Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability in the session serialization mechanism that allows authenticated administrators to inject arbitrary Lua code…
|
CWE-94
Code Injection
|
CVE-2026-44403
|
2026-05-14 23:50 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
929
|
7.5 |
HIGH
Network
|
phpoffice
|
phpspreadsheet
|
PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.4, 2.1.16, 2.4.5, 3.10.5, and 5.7.0, the XLSX reader's ColumnAndRowAttributes::readRowAttributes() method…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2026-40902
|
2026-05-14 23:50 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
930
|
7.5 |
HIGH
Network
|
owasp
|
modsecurity
|
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 to before 3.0.15, there is an unhandled exception (std::out_of_range) caused …
|
CWE-191 CWE-248
Integer Underflow (Wrap or Wraparound) Uncaught Exception
|
CVE-2026-42268
|
2026-05-14 23:49 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|