Vulnerability Intelligence
Reviewed CVE records, security advisories and in-depth analysis — every entry linked to its official source.
Snipeitapp Snipe-it < 8.7.0
Snipe-IT before 8.7.0 fails to properly sanitize markdown image syntax in note fields, allowing authenticated users to read arbitrary server files and issue server-side HTTP requests. Attackers can submit markdown image syntax…
Samsung Android 14.0
Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
Dell Secure Connect Gateway < 5.36.00.00
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An…
Dell Secure Connect Gateway < 5.36.00.00
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…
Microsoft Windows 11 23h2 < 10.0.22631.7582
Microsoft Windows Link Following Vulnerability
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
Microsoft Windows 10 1607 < 10.0.14393.9512
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
Connectwise Screenconnect < 26.6.5.9742
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.
Commvault Commvault >= 11.36.0, < 11.36.123
Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Command Center.
Microsoft Sql Server 2019 < 15.0.2190.7
Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.
Microsoft Sql Server 2017 < 14.0.2130.4
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.