Lucene search
+L

29262 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•10 views

CVE-2026-20749: Out-of-bounds Read

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Network adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via...

8.8CVSS5.8AI score0.00176EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•17 views

PT-2026-70313

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description Improper privilege management within Ring 2: Privileged Process may allow an escalation of privilege. An unprivileged software adversary with an...

7.3CVSS5.9AI score0.0012EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•7 views

CVE-2026-20886: Out-of-bounds Write

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

7.4CVSS5.8AI score0.00231EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•18 views

PT-2026-70301

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software affected versions not specified Description Improper conditions check within Ring 2 device drivers may allow a network adversary to cause a denial of service. This issue can be triggered by an unauthenticat...

8.6CVSS5.8AI score0.00354EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•19 views

PT-2026-70288

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description An improper conditions check within Ring 2: Device Drivers may allow a network adversary to cause a denial of service. This issue can be triggered by ...

7.4CVSS5.2AI score0.00175EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•11 views

CVE-2026-20789: Improper Access Control

Improper access control for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...

8.4CVSS6.1AI score0.00112EPSS
SaveExploits0References3
Intel
Intel
•added 2026/08/11 12:00 a.m.•28 views

Intel® PROSet/Wireless WiFi Software Advisory-01422

Summary: Potential security vulnerabilities for some Intel® PROSet/Wireless WiFi Software may allow escalation of privileges or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-20789 Description: Improper...

8.8CVSS6.2AI score0.00354EPSS
SaveExploits0
NVD
NVD
•added 2026/08/10 9:17 p.m.•26 views

CVE-2026-18618

A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known HTTP/2 denial of service DoS issues. An in-cluster attacker, with network access to the MLMD pod, could exploit these vulnerabilities by sending specially crafted HTTP/2...

7.5CVSS0.00846EPSS
SaveExploits0References7
CVE
CVE
•added 2026/08/10 8:45 p.m.•74 views

CVE-2026-18618

The CVE affects ml-metadata where the statically-linked gRPC stack is outdated, exposing HTTP/2 DoS vulnerabilities. An in-cluster attacker with network access to the MLMD pod could send specially crafted HTTP/2 requests to crash the MLMD pod, disrupting all pipeline runs in the affected namespac...

7.5CVSS7.3AI score0.00846EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/08/10 8:45 p.m.•10 views

CVE-2026-18618 Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener

A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known HTTP/2 denial of service DoS issues. An in-cluster attacker, with network access to the MLMD pod, could exploit these vulnerabilities by sending specially crafted HTTP/2...

7.5CVSS7.3AI score0.00846EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2026/08/10 8:45 p.m.•35 views

CVE-2026-18618

A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known HTTP/2 denial of service DoS issues. An in-cluster attacker, with network access to the MLMD pod, could exploit these vulnerabilities by sending specially crafted HTTP/2...

7.5CVSS7.3AI score0.00846EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/10 8:45 p.m.•48 views

CVE-2026-18618 Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener

A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known HTTP/2 denial of service DoS issues. An in-cluster attacker, with network access to the MLMD pod, could exploit these vulnerabilities by sending specially crafted HTTP/2...

7.5CVSS0.00846EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/08/10 8:45 p.m.•21 views

EUVD-2026-55825

A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known HTTP/2 denial of service DoS issues. An in-cluster attacker, with network access to the MLMD pod, could exploit these vulnerabilities by sending specially crafted HTTP/2...

7.5CVSS7.3AI score0.00846EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/08/10 8:45 p.m.•18 views

CVE-2026-18618

A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known HTTP/2 denial of service DoS issues. An in-cluster attacker, with network access to the MLMD pod, could exploit these vulnerabilities by sending specially crafted HTTP/2...

7.5CVSS7.3AI score0.00846EPSS
SaveExploits0References3
Circl
Circl
•added 2026/08/10 7:39 p.m.•36 views

GHSA-R28C-9Q8G-F849

creationtimestamp| type| source ---|---|--- 2026-08-10 19:39:38+00:00| seen| https://gist.github.com/klemmanton-lgtm/4a24aedae8017b5aebed0300d07c7ee9 2026-08-10 19:39:38+00:00| seen| https://gist.github.com/klemmanton-lgtm/8b54bdd2fe9905dc89b9c8ccf42f5fc4 2026-08-17 10:21:36+00:00| seen|...

5.8AI score
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/08/10 4:56 p.m.•36 views

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

5.3CVSS5.9AI score0.00289EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/08/10 4:49 p.m.•24 views

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

5.3CVSS5.9AI score0.00289EPSS
SaveExploits0References4
Circl
Circl
•added 2026/08/10 1:20 p.m.•24 views

CVE-2018-11798

creationtimestamp| type| source ---|---|--- 2026-08-10 13:20:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vheark2o 2026-08-13 08:46:14+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0991...

6.5CVSS7AI score0.04915EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/08/10 1:20 p.m.•14 views

CVE-2026-68277

In the Linux kernel, the following vulnerability has been resolved: drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers Three sideband reply parsers read 16-bit fields as: val = raw-msgidx msgidx+1; and check bounds only after the fact. When idx == raw-curlen, raw-msgidx+1 reads...

6AI score0.0022EPSS
SaveExploits0References14
osv_clsa
osv_clsa
•added 2026/08/10 11:33 a.m.•12 views

CLSA-2026-1786361581 TuxCare security update for jsonwebtoken (2 CVEs)

TuxCare rebuilt jsonwebtoken to address 2 CVEs. Fixed in 0.3.0-tuxcare.2...

8.7CVSS6.5AI score0.00598EPSS
SaveExploits1
Rows per page
Query Builder