CVE Security

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Versions 10.9.5 and earlier, as well as 11.0.0...

Applications Web


                                    CVE-2026-41149

Lire l'article

medium 6.5

29/05/2026

Vulnérabilité medium détectée - CVE-2026-42827

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose inform...

Windows


                                    CVE-2026-42827

Lire l'article

critical 10

29/05/2026

Vulnérabilité critical détectée - CVE-2026-42901

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

Windows


                                    CVE-2026-42901

Lire l'article

high 8.8

29/05/2026

Vulnérabilité high détectée - CVE-2026-45659

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Applications Windows


                                    CVE-2026-45659

Lire l'article

critical 10

29/05/2026

Vulnérabilité critical détectée - CVE-2026-47280

Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.

Windows


                                    CVE-2026-47280

Lire l'article

critical 10

29/05/2026

Vulnérabilité critical détectée - CVE-2026-40412

Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.

Windows


                                    CVE-2026-40412

Lire l'article

critical 9.3

29/05/2026

Vulnérabilité critical détectée - CVE-2026-41090

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform ta...

Windows


                                    CVE-2026-41090

Lire l'article

high 8.8

29/05/2026

Vulnérabilité high détectée - CVE-2026-35430

Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized attacker to elevate privileges ove...

Windows


                                    CVE-2026-35430

Lire l'article

critical 9.9

29/05/2026

Vulnérabilité critical détectée - CVE-2026-40411

Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network.

Windows


                                    CVE-2026-40411

Lire l'article

high 8.8

29/05/2026

Vulnérabilité high détectée - CVE-2026-41075

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection...

Web


                                    CVE-2026-41075

Lire l'article

high 8.1

29/05/2026

Vulnérabilité high détectée - CVE-2026-41076

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.9 and prior in addition to 6.0.0 through 6.0.2 contain an authen...

Applications


                                    CVE-2026-41076

Lire l'article

high 8.7

29/05/2026

Vulnérabilité high détectée - CVE-2026-41147

NukeViet CMS is a multi Content Management System. Versions 4.5.07 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability caused by insuf...

Web


                                    CVE-2026-41147

Lire l'article

12 13 14 15 16