|
3541
|
9.9 |
CRITICAL
Network
|
-
|
-
|
Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.
|
CWE-284
Improper Access Control
|
CVE-2026-33109
|
2026-05-9 00:47 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3542
|
9.6 |
CRITICAL
Network
|
-
|
-
|
Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.
|
CWE-285
Improper Authorization
|
CVE-2026-33823
|
2026-05-9 00:47 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3543
|
9.0 |
CRITICAL
Network
|
-
|
-
|
Improper input validation in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.
|
CWE-20
Improper Input Validation
|
CVE-2026-33844
|
2026-05-9 00:47 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3544
|
8.2 |
HIGH
Network
|
-
|
-
|
Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network.
|
CWE-610
Externally Controlled Reference to a Resource in Another Sphere
|
CVE-2026-34327
|
2026-05-9 00:47 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3545
|
9.6 |
CRITICAL
Network
|
-
|
-
|
Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network.
|
CWE-77
Command Injection
|
CVE-2026-35428
|
2026-05-9 00:47 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3546
|
8.6 |
HIGH
Network
|
-
|
-
|
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network.
|
CWE-284
Improper Access Control
|
CVE-2026-35435
|
2026-05-9 00:47 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3547
|
10.0 |
CRITICAL
Network
|
-
|
-
|
Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network.
|
CWE-200
Information Exposure
|
CVE-2026-42826
|
2026-05-9 00:47 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3548
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was identified in JeecgBoot up to 3.9.1. Affected by this issue is some unknown functionality of the file /sys/dict/loadTreeData of the component JSON Object Handler. The manipulation…
|
CWE-74 CWE-89
Injection SQL Injection
|
CVE-2026-8114
|
2026-05-9 00:47 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3549
|
5.3 |
MEDIUM
Network
|
-
|
-
|
A security flaw has been discovered in gyoridavid short-video-maker up to 1.3.4. This affects an unknown part of the file src/server/routers/rest.ts of the component REST API. The manipulation of the…
|
CWE-22
Path Traversal
|
CVE-2026-8115
|
2026-05-9 00:47 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3550
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A weakness has been identified in huangjunsen0406 xiaozhi-mcphub up to 1.0.3. This vulnerability affects unknown code of the file src/controllers/dxtController.ts. This manipulation of the argument m…
|
CWE-22
Path Traversal
|
CVE-2026-8116
|
2026-05-9 00:47 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|