Lucene search
+L

126254 matches found

Tenable Nessus
Tenable Nessus
added 2026/06/09 12:00 a.m.18 views

AlmaLinux 8 : libyang (ALSA-2026:24545)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:24545 advisory. libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob CVE-2026-44673 Tenable has extracted the preceding...

7.5CVSS6.2AI score0.00519EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/09 12:00 a.m.14 views

Fedora 45 : vorbis-tools (2026-9c00940406)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9c00940406 advisory. Automatic update for vorbis-tools-1.4.3-5.fc45. Changelog Tue Jun 9 2026 Luk Zaoral - 1:1.4.3-5 - CVE-2026-34253 - fix arbitrary code execution via buffer...

8.2CVSS6.5AI score0.00515EPSS
SaveExploits0References2
Adobe
Adobe
added 2026/06/09 12:00 a.m.25 views

APSB26-59 : Security update available for Adobe InCopy

Adobe has released a security update for Adobe InCopy. This update addresses critical vulnerabilities that could lead to arbitrary code execution...

5.8AI score
SaveExploits0Affected Software1
Adobe
Adobe
added 2026/06/09 12:00 a.m.76 views

APSB26-64 : Security update available for Adobe ColdFusion

Adobe has released security updates for ColdFusion versions 2025 and 2023. These updates resolves critical and important vulnerabilities that could lead to arbitrary code execution, privilege escalation, arbitrary file system read, and security feature bypass...

5.8AI score
SaveExploits0
Adobe
Adobe
added 2026/06/09 12:00 a.m.465 views

APSB26-63 : Security update available for Adobe Acrobat Reader

No description provided...

5.2AI score
SaveExploits0Affected Software3
CNVD
CNVD
added 2026/06/09 12:00 a.m.35 views

Apache HTTP Server memory error reference vulnerability

The Apache HTTP Server is an open-source web server developed by the Apache Foundation in the United States. This server is known for its speed, reliability, and ability to be expanded through simple APIs. The Apache HTTP Server has a memory corruption vulnerability. Attackers can exploit this...

7.3CVSS5.9AI score0.00479EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.41 views

PT-2026-48254

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions prior to 26.001.21652 Description A Use After Free issue exists where memory is accessed after it has been freed. This can lead to arbitrary code execution in the context of the current user. Exploitation requires user...

7.8CVSS6AI score0.00165EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.39 views

PT-2026-48221

Name of the Vulnerable Software and Affected Versions Substance3D Sampler versions 6.0.0 and earlier Description An out-of-bounds write occurs when the software processes a malicious file. This issue can lead to arbitrary code execution within the context of the current user and requires user...

7.8CVSS6.2AI score0.00144EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.30 views

PT-2026-48278

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC versions prior to 7.4.3 build 9395 Description An incorrect authorization issue exists that could allow arbitrary code execution in the context of the current user. This flaw can be exploited without requiring any us...

10CVSS6.2AI score0.00553EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.30 views

PT-2026-48308

Name of the Vulnerable Software and Affected Versions Spring Security versions 5.7.0 through 5.7.23 Spring Security versions 5.8.0 through 5.8.25 Spring Security versions 6.3.0 through 6.3.16 Spring Security versions 6.4.0 through 6.4.16 Spring Security versions 6.5.0 through 6.5.10 Spring Securi...

7.6CVSS5.7AI score0.00204EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.43 views

PT-2026-48274

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC versions prior to 7.4.3 build 9395 Description A Server-Side Request Forgery SSRF issue exists where the server can be coerced into making unauthorized requests. This can lead to privilege escalation or arbitrary cod...

10CVSS6.2AI score0.00449EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.31 views

PT-2026-48246

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 24.001.30365 through 26.001.21651 Description A Use After Free issue exists in the font handling component, which could lead to arbitrary code execution in the context of the current user. This occurs when a victim open...

7.8CVSS7.8AI score0.00329EPSS
SaveExploits0References6
CVE
CVE
added 2026/06/09 12:00 a.m.31 views

CVE-2026-30141

The CVE-2026-30141 entry concerns bitbank2 AnimatedGIF v2.2.0, where a vulnerability in DecodeLZW constitutes a buffer overflow. This allows remote attackers to cause a crash (DoS) or potentially execute arbitrary code via a crafted GIF file. The available documents specify the affected product a...

9.8CVSS6.3AI score0.00573EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.43 views

PT-2026-48252

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 24.001.30365 through 26.001.21651 Description A Use After Free issue exists in the annotation component, which could result in arbitrary code execution in the context of the current user. Exploitation requires user...

7.8CVSS7.9AI score0.00297EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:00 a.m.28 views

X.Org Server CheckKeyTypes Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of key...

7.8CVSS6AI score0.0025EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.56 views

PT-2026-48269

Name of the Vulnerable Software and Affected Versions ColdFusion versions 2023.19 and earlier ColdFusion versions 2025.8 and earlier Description An incorrect authorization flaw allows a high-privileged attacker to achieve arbitrary code execution in the context of the current user. This issue...

9.1CVSS6AI score0.02092EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.29 views

PT-2026-48247

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 24.001.30365 through 26.001.21651 Description A Use After Free issue exists in the Multimedia Rendition component, which could lead to arbitrary code execution in the context of the current user. This occurs when a user...

7.8CVSS7.8AI score0.00329EPSS
SaveExploits0References6
Redos
Redos
added 2026/06/09 12:00 a.m.22 views

ROS-20260609-73-0008

The vulnerability of the SQL Expressions function on the Grafana monitoring and observation platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain unauthorized access to the platform by sending speciall...

9.1CVSS6.1AI score0.01929EPSS
SaveExploits1
Redos
Redos
added 2026/06/09 12:00 a.m.16 views

ROS-20260609-73-0007

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by sending a specially crafte...

9.2CVSS6.3AI score0.10856EPSS
SaveExploits4
Oracle linux
Oracle linux
added 2026/06/09 12:00 a.m.22 views

libyang security update

1.0.184-2 - DoS or arbitrary code execution via maliciously crafted LYB binary blob - Resolves: RHEL-177017 - CVE-2026-44673...

7.5CVSS6.2AI score0.00519EPSS
SaveExploits0
Rows per page
Query Builder