Lucene search
+L

271256 matches found

Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.21 views

PT-2026-79242

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A heap-based buffer overflow allows a remote attacker to execute arbitrary code. A heap-based buffer overflow occurs when a program writes more data to a heap memory block...

9.8CVSS6.5AI score0.00589EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.28 views

PT-2026-79125

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description A use after free issue in Chromoting allows a remote attacker to execute arbitrary code outside the sandbox by sending crafted network traffic. Use after free is a memory corruption fl...

8.8CVSS6.2AI score0.00428EPSS
SaveExploits0References16
BDU FSTEC
BDU FSTEC
added 2026/08/20 12:00 a.m.17 views

The vulnerability of the pg_stat_statements extension in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgstatstatements extension in the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6.3AI score0.00427EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/20 12:00 a.m.18 views

The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS6AI score0.00423EPSS
SaveExploits0References3Affected Software2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/20 12:00 a.m.28 views

Malicious code in append_only_vec (crates.io)

append-only-vec 0.1.9 was published to crates.io from the same maintainer account droundy as the trojanized arrayref and internment releases, which appears to be compromised. The release adds a dependency on an attacker-controlled crate whose build script downloads and executes an...

5.5AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.25 views

PT-2026-79228

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A buffer overflow allows a remote attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...

9.8CVSS6.2AI score0.00562EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.17 views

PT-2026-79268

Name of the Vulnerable Software and Affected Versions SPIP versions prior to 4.4.20 Description Unauthenticated remote attackers can execute arbitrary code due to the incorrect identification of ?php blocks and the mishandling of certain cases, such as the presence of a character, within the var...

9.8CVSS6.2AI score0.0262EPSS
SaveExploits2References7
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/20 12:00 a.m.33 views

Malicious code in internment (crates.io)

internment 0.8.7 was published to crates.io from the same maintainer account droundy as the trojanized arrayref and append-only-vec releases, which appears to be compromised. The release adds a dependency on an attacker-controlled crate whose build script downloads and executes an...

5.5AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.17 views

PT-2026-79248

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A heap-based buffer overflow allows a remote attacker to execute arbitrary code. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer...

9.8CVSS6.2AI score0.00589EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.20 views

PT-2026-79231

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An integer overflow occurs during size computation, which could allow a remote attacker to execute arbitrary code. Recommendations At the moment, there is no information abo...

9.8CVSS5.8AI score0.00546EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.18 views

PT-2026-79126

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description A privilege elevation issue exists in the Import component. A remote attacker could use social engineering to trick a user into opening a crafted file, potentially allowing the executi...

8.8CVSS6AI score0.00386EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.25 views

PT-2026-79128

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description A race condition in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to open a specially crafted HTML page. A race condition...

7.5CVSS5.9AI score0.00301EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.16 views

PT-2026-79180

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A use-after-free issue exists that could allow a remote attacker to execute arbitrary code. Use-after-free is a memory corruption flaw that occurs when an application...

9.8CVSS6.3AI score0.00443EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.22 views

PT-2026-79265

A critical remote code execution RCE vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

9.2CVSS6.4AI score0.00472EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.20 views

PT-2026-79229

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack buffer overflow allows a remote attacker to execute arbitrary code. A stack buffer overflow occurs when a program writes more data to a buffer located on the stack...

9.8CVSS6.3AI score0.00562EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/08/20 12:00 a.m.9 views

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the setBeanClassLoader process. An attacker can execute arbitrary code by injecting malicious serialized data into the INTMESSAGE.MESSAGECONTENT field. This is only exploitable if the deserializatio...

8CVSS6.2AI score0.00346EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
added 2026/08/20 12:00 a.m.48 views

VulnCheck KEV: CVE-2026-69836

Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network...

10CVSS5.8AI score0.01555EPSS
SaveIn wildExploits0References2
Kaspersky
Kaspersky
added 2026/08/20 12:00 a.m.32 views

KLA91233 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Chromoting can be...

8.8CVSS6.8AI score0.00468EPSS
SaveExploits0References3
Spring Security Advisories
Spring Security Advisories
added 2026/08/20 12:00 a.m.16 views

cve-2026-47864 - MEDIUM - Unsafe Java deserialization in SerializingHttpMessageConverter — remote code execution

cve-2026-47864 - MEDIUM - Unsafe Java deserialization in SerializingHttpMessageConverter — remote code execution...

9.8CVSS6.4AI score0.04075EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.26 views

Oracle Linux 10 : php8.4 (ELSA-2026-56969)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-56969 advisory. 8.4.24-2 - rebase to 8.4.24 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

9.8CVSS5.6AI score0.00426EPSS
SaveExploits4References3
Rows per page
Query Builder