Lucene search
+L

68760 matches found

Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•29 views

PT-2026-32555

SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or...

2CVSS6AI score0.00243EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•22 views

Microsoft Windows Ancillary Function Driver for WinSock 资源管理错误漏洞

The Microsoft Windows Ancillary Function Driver for WinSock is a compatibility driver developed by Microsoft for Winsock. There is a resource management vulnerability present in the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit this vulnerability to gain elevated...

7CVSS5.8AI score0.00264EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•29 views

Microsoft Windows Ancillary Function Driver for WinSock 资源管理错误漏洞

The Microsoft Windows Ancillary Function Driver for WinSock is a supplementary function driver for Winsock by Microsoft Corporation. There is a resource management vulnerability present in the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit this vulnerability to gai...

7CVSS5.8AI score0.00264EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•4 views

CVE-2026-33099: Use After Free

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•12 views

The vulnerability of the special_keys() function in the src/netbeans.c file of the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the specialkeys function in the src/netbeans.c file of the Vim text editor is related to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.6CVSS7.5AI score0.00521EPSS
SaveExploits0References7Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•12 views

The vulnerability of the connect() function in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the connect function in the Linux operating system’s kernel relates to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow a attacker to cause a service failure...

5.5CVSS6.5AI score0.00157EPSS
SaveExploits0References18Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•9 views

The vulnerability of the brelse() function in the Linux operating system’s kernel allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the brelse function in the Linux operating system’s kernel is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

5.2CVSS6.8AI score0.00211EPSS
SaveExploits0References13Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•14 views

The vulnerability of the os.path.expandvars() function in the Python interpreter allows a hacker to trigger a service failure.

The vulnerability of the os.path.expandvars function in the Python interpreter is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a hacker to cause service failures...

5.5CVSS6.7AI score0.00149EPSS
SaveExploits0References12Affected Software8
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•21 views

The vulnerability of the formSetRoute() function in D-Link DIR-513 router microprogramming software allows a hacker to cause memory corruption.

The vulnerability of the formSetRoute function in D-Link DIR-513 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause memory corruption...

9CVSS7.6AI score0.01196EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•4 views

CVE-2026-26168: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00202EPSS
SaveExploits0References3
Redos
Redos
•added 2026/04/14 12:00 a.m.•13 views

ROS-20260414-73-0044

A vulnerability in the smclgrterminate function of the net/smc/smccore.c module of the Linux kernel's implementation of the SMC family of socket protocols is related to the occurrence of mutual blocking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS6AI score0.00121EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•5 views

CVE-2026-32073: Use After Free

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•24 views

Microsoft Windows Ancillary Function Driver for WinSock 代码问题漏洞

The Microsoft Windows Ancillary Function Driver for WinSock is a supplementary function driver for Winsock by Microsoft Corporation. There are code-related vulnerabilities in the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit these vulnerabilities to gain elevated...

7CVSS5.8AI score0.00202EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•14 views

PT-2026-32799

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A use after free race condition in the Windows Ancillary Function Driver for WinSock afd.sys allows an authorized attacker to elevate privileges locally...

7CVSS6.7AI score0.00264EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•30 views

Microsoft Function Discovery Service 安全漏洞

The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Function Discovery Service. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versio...

7CVSS5.8AI score0.00202EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•3 views

CVE-2026-33100: Use After Free

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•23 views

Microsoft Function Discovery Service 安全漏洞

The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Function Discovery Service fdwsd.dll. Attackers can exploit these vulnerabilities to gain elevated privileges. The following product...

7CVSS5.8AI score0.00264EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•14 views

PT-2026-32754

CVE-2026-26177 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. https://t.co/AzyibGnFso...

7CVSS6.2AI score0.00264EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•5 views

CVE-2026-34261: Missing Authorization

Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote function modules, potentially accessing sensitive information beyond their intended permissions. This vulnerability affects...

6.5CVSS5.9AI score0.00354EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•4 views

CVE-2026-32150: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Function Discovery Service fdwsd.dll allows an authorized attacker to elevate privileges locally...

7CVSS5.7AI score0.00202EPSS
SaveExploits0References2
Rows per page
Query Builder