Lucene search
+L

54661 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•9 views

CVE-2026-55343: Buffer Copy without Checking Size of Input

In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

8CVSS6.3AI score0.00296EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•27 views

PT-2026-92324

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the code allows for a use-after-free condition, which occurs when a program continues to use a pointer after it has been freed. This issue could...

9.8CVSS6.1AI score0.00401EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•27 views

PT-2026-92868

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Control version 12.2.1.4.0 Oracle Fusion Middleware Control version 14.1.2.0.0 Description A flaw in the Framework component allows a low privileged attacker with network access via HTTP to compromise the system...

5.4CVSS5.7AI score0.00207EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•17 views

PT-2026-92309

In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00098EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•44 views

PT-2026-92332

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the get global config item addr function within the gc.c file allows for a possible out-of-bounds read. This condition can be leveraged...

8.4CVSS5.8AI score0.00101EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•22 views

PT-2026-92342

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.5CVSS5.8AI score0.00326EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•27 views

PT-2026-92328

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An incorrect bounds check in multiple locations allows for a possible out-of-bounds write, which is a condition where data is written outside the intended memory...

6.7CVSS5.8AI score0.00098EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•24 views

PT-2026-92356

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the DecodeFilmGrainParams function within the film grain dec.cc file allows for an out-of-bounds write. This condition can be leveraged...

8.8CVSS6.1AI score0.00372EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•27 views

PT-2026-92299

Name of the Vulnerable Software and Affected Versions IP Multimedia Subsystem affected versions not specified Description An incorrect bounds check in the IP Multimedia Subsystem allows for an out-of-bounds write. This condition can be exploited to achieve remote code execution without requiring...

8.8CVSS6.1AI score0.00372EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•5 views

CVE-2026-55306: Improper Input Validation

In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS5.9AI score0.0035EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•22 views

PT-2026-92327

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A permission bypass exists in multiple locations due to a missing permission check. This flaw allows for local escalation of privilege without requiring...

8.4CVSS5.7AI score0.00102EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•48 views

PT-2026-92302

Name of the Vulnerable Software and Affected Versions VPU affected versions not specified Description An integer overflow in VPU can lead to an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This issue allows for local escalation of privilege...

7.8CVSS6AI score0.00096EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•24 views

PT-2026-92295

Name of the Vulnerable Software and Affected Versions Cellular Modem affected versions not specified Description Improper input validation in the Cellular Modem allows for a remote denial of service. This issue can be exploited without user interaction or additional execution privileges...

7.5CVSS5.8AI score0.0035EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•18 views

PT-2026-92282

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the code allows for an out-of-bounds write in multiple locations. This condition can be exploited to achieve remote code execution without...

8.8CVSS6.1AI score0.0029EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•22 views

PT-2026-92333

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A logic error in the code allows for a permission bypass in multiple locations. This issue can lead to local escalation of privilege, granting System execution...

6.7CVSS5.8AI score0.00103EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•24 views

PT-2026-92360

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A race condition in multiple locations may lead to a use-after-free scenario, where the system continues to use a memory address after it has been freed. This...

7CVSS6AI score0.00068EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•27 views

PT-2026-93098

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.16 Description An issue in the Core component allows an unauthenticated attacker with access to the infrastructure where the software executes to compromise the system. Exploitation requires human interaction a...

6.1CVSS5.8AI score0.00154EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•33 views

PT-2026-93094

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.16 Description A flaw in the Core component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. Exploitation is difficult and requires human...

4.4CVSS5.8AI score0.00119EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•32 views

PT-2026-92708

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite component: CRM User Management Framework. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

7.3CVSS5.6AI score0.00315EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•24 views

PT-2026-92330

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds write can occur in the Start function of AudioRtpPayloadEncoderNode.cpp due to improper input validation. This issue may allow remote code...

8.8CVSS6.1AI score0.00372EPSS
SaveExploits0References4
Rows per page
Query Builder