Lucene search
+L

249085 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-79079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in CrossWire Xiphos = 4.3.2 allows a local attacker to execute arbitrary code via the src/main/url.cc and src/gtk/menupopup.c components CVE-2026-79079...

7.8CVSS6.7AI score0.00191EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•16 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2026-090053)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090053 advisory. When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and...

8.8CVSS8.8AI score0.01647EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•11 views

RockyLinux 8 : postgresql:16 (RLSA-2026:69876)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69876 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitra...

8.8CVSS8.2AI score0.00683EPSS
SaveExploits3References33
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•19 views

CVE-2026-76715: Channel Accessible by Non-Endpoint

A vulnerability in an administrative component of Analytics and Location Engine ALE is vulnerable to a man-in-the-middle MitM attack. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the affected applian...

7.1CVSS6.8AI score0.00259EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•13 views

PT-2026-96983

Name of the Vulnerable Software and Affected Versions Adobe Connect versions prior to 12.12 Description Adobe Connect contains an SQL Injection flaw, which occurs when special elements used in an SQL command are not properly neutralized. This allows a low-privileged attacker to execute arbitrary...

9.9CVSS8.8AI score0.00547EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/09/22 12:00 a.m.•20 views

RHEL 9 : postgresql:15 (RHSA-2026:69698)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69698 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

8.8CVSS8.2AI score0.00683EPSS
SaveExploits3References20
Redos
Redos
•added 2026/09/22 12:00 a.m.•12 views

ROS-20260922-73-0004

The vulnerability in gstreamer1-plugins-good is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.3AI score0.00211EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•13 views

PT-2026-97076

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description An adjacent-network attacker could execute arbitrary code due to the deserialization of untrusted data. Deserialization is the process of...

8.8CVSS6.4AI score0.00242EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•9 views

PT-2026-96802

Name of the Vulnerable Software and Affected Versions SLC8000 versions prior to 9.7.0.2 SLC9000 versions prior to 9.7.0.2 EMG8500 versions prior to 9.7.0.1 EMG7500 versions prior to 9.7.0.1 SLB882 affected versions not specified SLCx-03 affected versions not specified SLCx-02 affected versions no...

9.9CVSS6.6AI score0.00848EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•12 views

CVE-2026-96269: Inclusion of Functionality from Untrusted Control Sphere

GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it...

7.5CVSS6.4AI score0.00147EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•8 views

CVE-2026-89275: Improper Control of Generation of Code

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS7AI score0.01248EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•11 views

CVE-2026-75663: Out-of-bounds Write

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00158EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•11 views

PT-2026-96917

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Control of Generation of Code issue allows a low-privileged attacker to perform code injection, leading to arbitrary code execution within the context of the...

9.9CVSS8.9AI score0.00526EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•10 views

PT-2026-96916

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An Improper Control of Generation of Code flaw allows for code injection, which could result in arbitrary code execution in the context of the current user. This issue is...

10CVSS6.2AI score0.01248EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•7 views

PT-2026-96908

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to...

9.1CVSS6.8AI score0.00991EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•10 views

PT-2026-96981

Name of the Vulnerable Software and Affected Versions Adobe Bridge affected versions not specified Description A Heap-based Buffer Overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue could result in arbitrary code...

7.8CVSS7.7AI score0.00199EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•12 views

PT-2026-96894

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could lead to arbitrary code execution within the context of the current user. This flaw ca...

10CVSS8.4AI score0.01248EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•5 views

PT-2026-96980

Name of the Vulnerable Software and Affected Versions Adobe Bridge affected versions not specified Description An out-of-bounds write issue exists that could allow arbitrary code execution in the context of the current user. This occurs when a user opens a malicious file, which is required for th...

7.8CVSS7.7AI score0.00158EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•17 views

CVE-2026-82009: Improper Neutralization of Special Elements used in an SQL Command

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to...

9.1CVSS6.8AI score0.00991EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•10 views

PT-2026-97004

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a designated memory buffer. This issue could allow arbitrary code execution in the context of the curren...

7.8CVSS7.7AI score0.00138EPSS
SaveExploits0References5
Rows per page
Query Builder