Lucene search
+L

313359 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

Microsoft Windows: CVE-2026-102188: Windows Storage Port Driver Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...

6.8CVSS5.8AI score0.0048EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•14 views

CVE-2026-69902: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally...

6.7CVSS6.2AI score0.00396EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

Microsoft Windows: CVE-2026-83889: Windows DNS Server Remote Code Execution Vulnerability

Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network...

8.8CVSS6.3AI score0.01056EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

Microsoft Windows: CVE-2026-85909: Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.0044EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

CVE-2026-96847: Untrusted Pointer Dereference

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00353EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

Microsoft Windows: CVE-2026-85833: Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00312EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

CVE-2026-96188: External Control of System or Configuration Setting

External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...

7.3CVSS5.7AI score0.00376EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•25 views

PT-2026-113388

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory...

5.5CVSS5.9AI score0.00139EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

Microsoft Windows: CVE-2026-70077: Windows Kernel Information Disclosure Vulnerability

Use after free in Windows Kernel allows an authorized attacker to disclose information locally...

4.7CVSS6.2AI score0.00353EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

CVE-2026-83583: Missing Authorization

Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00339EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•15 views

PT-2026-113090

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A missing reference to an active allocated resource in the Windows SMB Server enables an unauthorized attacker to cause a denial of service over a network. Recommendations At the...

7.5CVSS5.8AI score0.01054EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

Microsoft Windows: CVE-2026-69931: Windows Storage Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Storage allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.0023EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•16 views

CVE-2026-109523: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...

7.5CVSS6.8AI score0.00318EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-109110: Improper Neutralization of Special Elements used in an OS Command

A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was...

10CVSS8.4AI score0.02028EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•17 views

PT-2026-112633

Name of the Vulnerable Software and Affected Versions Microsoft Bluetooth Driver affected versions not specified Description A race condition exists in the Microsoft Bluetooth Driver. This occurs when concurrent execution using a shared resource lacks proper synchronization, allowing an authorize...

7CVSS5.8AI score0.00199EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-113093

Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00377EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•12 views

PT-2026-111208

Name of the Vulnerable Software and Affected Versions TensorLayer versions prior to 2.2.5 Description An issue exists in the HDF5 Loading component within the load hdf5 graph function of the tensorlayer/files/utils.py file. A remote attacker can manipulate the model config argument to trigger...

7.5CVSS6.4AI score0.00259EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

CVE-2026-70214: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00566EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/10/13 12:00 a.m.•15 views

UBUNTU-CVE-2026-96235

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00859EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-96206: Use of Uninitialized Resource

Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally...

6.5CVSS5.7AI score0.0044EPSS
SaveExploits0References2
Rows per page
Query Builder