Lucene search
+L

159471 matches found

Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•22 views

PT-2026-91625

Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description A path traversal issue exists where an attacker controlling a network directory server can bypass path validation to...

7.8CVSS6.6AI score0.00194EPSS
SaveExploits2References11
CVE
CVE
•added 2026/09/14 12:00 a.m.•44 views

CVE-2023-22632

PRTG Network Monitor (Paessler) before version 23.1.82 is affected by a vulnerability that allows remote attackers to write to files via the FTP Server Count Sensor . The attack requires high privileges (authenticated access) over the network, resulting in a low integrity impact (CVSS 3.1 score 2...

2.7CVSS5.9AI score0.00225EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/14 12:00 a.m.•16 views

Debian dsa-6498 : network-manager-l2tp - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6498 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6498-1 [email protected] https://www.debian.org/securit...

8.5CVSS6AI score0.00178EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/09/14 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-75131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability that allows local users with permission to create VPN...

8.5CVSS6.7AI score0.00178EPSS
SaveExploits0References2
Redos
Redos
•added 2026/09/14 12:00 a.m.•10 views

ROS-20260914-73-0090

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

3.1CVSS6AI score0.00165EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•11 views

CVE-2026-54628: Improper Access Control

Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes URL-capable SQLite virtual table modules such as jsonreader and logreader through its unauthenticated MySQL-compatible server port without restricting outbound destinations. A remote attacker can provi...

8.6CVSS8.5AI score0.00597EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•3 views

CVE-2026-86889: Improper Certificate Validation

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to intercept network traffic...

4.8CVSS5.7AI score0.00197EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•24 views

PT-2026-91397

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage...

7.1CVSS5.7AI score0.00251EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•32 views

PT-2026-91493

Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, was addressed wi...

6.5CVSS5.9AI score0.00392EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•31 views

PT-2026-91035

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor...

2.7CVSS5.9AI score0.00225EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•21 views

PT-2026-91458

IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

6.5CVSS5.8AI score0.00226EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•10 views

CVE-2026-84585: Improper Access Control

A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access local network devices without user consent...

5.5CVSS5.8AI score0.00157EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•12 views

CVE-2026-90996: Integer Underflow (Wrap or Wraparound)

A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to the Network Security Services NSS responder. This could lead to a denial-of-service condition, causing the NSS responder to become unstable or terminate. This vulnerability affect...

5.5CVSS5.7AI score0.00128EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•13 views

CVE-2023-22632: Improper Neutralization of Argument Delimiters in a Command

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor...

2.7CVSS5.9AI score0.00225EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•25 views

PT-2026-91690

Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description A certificate validation issue exists that could allow an attacker in a privileged network position to intercept network...

4.8CVSS5.7AI score0.00197EPSS
SaveExploits0References6
Redos
Redos
•added 2026/09/14 12:00 a.m.•9 views

ROS-20260914-73-0113

The vulnerability of the Network component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

9.6CVSS8.4AI score0.00337EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/09/14 12:00 a.m.•16 views

CVE-2023-22632

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor...

2.7CVSS5.9AI score0.00225EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/14 12:00 a.m.•42 views

CVE-2023-22631

CVE-2023-22631 affects PRTG Network Monitor versions before 23.1.82 , allowing a remote attacker with high privileges to write to files via the HTTP XML/REST Sensor , resulting in a low integrity impact (CVSS 3.1: 2.7 LOW , AV:N/AC:L/PR:H). The Dutch NCSC advisory notes that an authenticated mali...

2.7CVSS5.9AI score0.00225EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•10 views

CVE-2026-12766: Server-Side Request Forgery (SSRF)

IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

5.4CVSS5.9AI score0.00181EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•19 views

PT-2026-91459

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.11.2 Description An authenticated attacker can perform server-side request forgery SSRF, a flaw that allows the system to be coerced into making unauthorized requests. This can be used for network...

5.4CVSS5.7AI score0.00181EPSS
SaveExploits0References3
Rows per page
Query Builder