Lucene search
+L

166258 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•8 views

CVE-2026-76486: Stack-based Buffer Overflow

A vulnerability in the VXLAN Operation, Administration, and Maintenance OAM feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a Denial-of-Service DoS on an affected device. This vulnerability is...

9.8CVSS9AI score0.0054EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•13 views

CVE-2026-76465: Free of Memory not on the Heap

A vulnerability in the MPLS Operation, Administration, and Maintenance OAM feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of...

9.8CVSS9AI score0.0046EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•19 views

PT-2026-107319

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description Remote authenticated attackers can execute arbitrary code due to improper neutralization of special elements used in code. Recommendations Update IBM Langflow OSS to a version later th...

8.8CVSS6.5AI score0.00403EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•19 views

PT-2026-107322

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description Improper control of code generation allows a remote authenticated attacker to execute arbitrary code. Recommendations Update IBM Langflow OSS to a version later than 1.12.2...

8.8CVSS6.5AI score0.00411EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-106227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page...

9.6CVSS7AI score0.00444EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-106252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

8.8CVSS6.8AI score0.00303EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-106421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

8.8CVSS7AI score0.00309EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-106190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

8.8CVSS7AI score0.00368EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•12 views

PT-2026-107535

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

6.2CVSS6.7AI score0.00121EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•13 views

PT-2026-107614

Name of the Vulnerable Software and Affected Versions Cisco License On-Prem affected versions not specified Description Cisco License On-Prem, previously known as Cisco Smart Software Manager On-Prem, contains issues involving insufficient protection against code injection. This flaw is categoriz...

8.8CVSS7.8AI score0.00283EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•12 views

PT-2026-107533

Name of the Vulnerable Software and Affected Versions @backstage/plugin-techdocs-node versions prior to 1.14.8 @backstage/plugin-techdocs-node versions prior to 1.15.6 @backstage/plugin-techdocs-node versions prior to 2.0.1 Description The @backstage/plugin-techdocs-node package improperly...

8.8CVSS6.5AI score0.00469EPSS
SaveExploits0References14
Redos
Redos
•added 2026/10/07 12:00 a.m.•4 views

ROS-20261007-73-0120

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS7.1AI score0.00194EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•10 views

CVE-2026-93675: Expected Behavior Violation

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected dependency confusion...

9.8CVSS6.8AI score0.00625EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•7 views

CVE-2026-97678: Protection Mechanism Failure

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation...

8.8CVSS6.8AI score0.00566EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•10 views

CVE-2026-97673: Protection Mechanism Failure

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation...

8.8CVSS7AI score0.00607EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•11 views

CVE-2026-104335: Improper Access Control

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper access control...

8.8CVSS6.8AI score0.00869EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•8 views

CVE-2026-88962: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...

8.8CVSS7AI score0.00678EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-106375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a...

9.6CVSS6.9AI score0.00411EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/10/07 12:00 a.m.•40 views

OCaml readblock() Code Execution

The vulnerability of the readblock function in the runtime/intern.c file of the OCaml programming language is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.9CVSS7.5AI score0.00241EPSS
SaveExploits1References5Affected Software3
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-106211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code...

9.6CVSS7.5AI score0.00462EPSS
SaveExploits0References2
Rows per page
Query Builder