Lucene search
+L

292 matches found

OSV
OSV
added 2026/08/20 10:47 p.m.7 views

MINI-46HQ-P8F9-656Q

Bulletin has no description...

8.7CVSS4.8AI score0.00396EPSS
SaveExploits0
OSV
OSV
added 2026/08/19 2:57 p.m.4 views

MINI-WCP9-24P8-QWC2

Bulletin has no description...

4.3CVSS4.8AI score0.00262EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/17 9:34 p.m.9 views

Security Bulletin: IBM i is Affected By A Buffer Overflow Vulnerability [CVE-2026-18102]

Summary IBM i is vulnerable to heap-based buffer overflow CVE-2026-18102 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18102 DESCRIPTION: IBM i could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during...

4.3CVSS5.8AI score0.00231EPSS
SaveExploits0Affected Software5
OSV
OSV
added 2026/08/17 1:40 p.m.7 views

MINI-JWCG-FXW6-J63J

Bulletin has no description...

5.9CVSS5AI score0.00518EPSS
SaveExploits0
OSV
OSV
added 2026/08/15 1:33 p.m.8 views

MINI-FQCW-R2WJ-CQXW

Bulletin has no description...

7.5CVSS4.8AI score0.00568EPSS
SaveExploits0
OSV
OSV
added 2026/08/14 2:36 p.m.3 views

MINI-G256-W99W-MH8P

Bulletin has no description...

7.5CVSS4.8AI score0.00568EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:25 a.m.20 views

GO-2023-2042 vulnerabilities

Vulnerabilities for packages: metrics-server...

5.3AI score
SaveExploits0
NVD
NVD
added 2026/08/13 8:17 p.m.6 views

CVE-2026-72675

Missing Authorization CWE-862 in Kibana can lead to cross-space information disclosure and unauthorized data modification via Privilege Abuse CAPEC-122. Kibana Machine Learning carries out its Elasticsearch operations with elevated internal permissions and relies on a per-request space filter to...

7.1CVSS0.00227EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/13 8:17 p.m.5 views

CVE-2026-72630

Incorrect Authorization CWE-863 in Kibana Fleet can lead to privilege escalation via Privilege Abuse CAPEC-122. Fleet restricts some callers to managing integration policies for one specific integration. When an existing integration policy was updated, that restriction was evaluated against the...

7.1CVSS0.00223EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/13 7:13 p.m.9 views

EUVD-2026-58290

Incorrect Authorization CWE-863 in Kibana Fleet can lead to privilege escalation via Privilege Abuse CAPEC-122. Fleet restricts some callers to managing integration policies for one specific integration. When an existing integration policy was updated, that restriction was evaluated against the...

7.1CVSS5.3AI score0.00223EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/13 7:13 p.m.31 views

CVE-2026-72630

CVE-2026-72630 affects Kibana Fleet with Incorrect Authorization (CWE-863) causing privilege escalation (CAPEC-122). Root cause: during updates, Fleet validates the integration policy restriction against the stored policy’s integration instead of the replacement integration, allowing a user with ...

7.1CVSS5.3AI score0.00223EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/13 7:13 p.m.29 views

CVE-2026-72630 Incorrect Authorization in Kibana Fleet Leading to Privilege Escalation

Incorrect Authorization CWE-863 in Kibana Fleet can lead to privilege escalation via Privilege Abuse CAPEC-122. Fleet restricts some callers to managing integration policies for one specific integration. When an existing integration policy was updated, that restriction was evaluated against the...

7.1CVSS0.00223EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/13 7:11 p.m.31 views

CVE-2026-72675

CVE-2026-72675 concerns Kibana’s Machine Learning: missing authorization allows cross-space information disclosure and unauthorized data modification due to some Elasticsearch operations running with elevated internal permissions and insufficient per-request space filtering. The issue affects Kib...

7.1CVSS5.3AI score0.00227EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/13 7:11 p.m.47 views

CVE-2026-72675 Missing Authorization in Kibana Machine Learning Leading to Cross-Space Information Disclosure and Unauthorized Data Modification

Missing Authorization CWE-862 in Kibana can lead to cross-space information disclosure and unauthorized data modification via Privilege Abuse CAPEC-122. Kibana Machine Learning carries out its Elasticsearch operations with elevated internal permissions and relies on a per-request space filter to...

7.1CVSS0.00227EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/08/11 6:58 p.m.15 views

Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or...

7.8CVSS5.5AI score0.00404EPSS
SaveExploits0References5Affected Software3
OSV
OSV
added 2026/08/11 6:58 p.m.6 views

GHSA-JQHP-238X-QHGF Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or...

7.8CVSS5.5AI score0.00404EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/08/11 4:31 p.m.8 views

CVE-2026-48440 ColdFusion | Heap-based Buffer Overflow (CWE-122)

ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction...

8.1CVSS6.1AI score0.00554EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/11 4:31 p.m.40 views

CVE-2026-48440 ColdFusion | Heap-based Buffer Overflow (CWE-122)

ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction...

8.1CVSS0.00554EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/11 4:31 p.m.61 views

CVE-2026-48440

CVE-2026-48440 affects Adobe ColdFusion due to a Heap-based Buffer Overflow . The issue could allow arbitrary code execution in the context of the current user . Exploitation depends on conditions beyond the attacker’s control and does not require user interaction. Current documents do not specif...

8.1CVSS6.1AI score0.00554EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70324

Heap-based buffer overflow for the IntelR Open Volume Kernel Library IntelR Open VKL library maintained by intelR before version 2.0.2 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may...

6.9CVSS5.5AI score0.00114EPSS
SaveExploits0References2
Rows per page
Query Builder