Lucene search
+L

211480 matches found

CVE
CVE
added 2026/08/11 10:21 a.m.157 views

CVE-2026-58231

An unauthenticated attacker can abuse a default authentication client in SAP Commerce Cloud's Data Hub Adapter to submit crafted input, enabling arbitrary code execution. CVSS 10.0; CIRCL confirms active exploitation. SAP patch note 3771065 provides fixes; IP Filter Set is a temporary workaround....

10CVSS6AI score0.0171EPSS
SaveIn wildExploits2References2
EUVD
EUVD
added 2026/08/11 10:21 a.m.9 views

EUVD-2026-55999

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...

10CVSS6AI score0.0171EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2026/08/11 10:21 a.m.45 views

CVE-2026-58231 Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...

10CVSS0.0171EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
added 2026/08/11 8:50 a.m.10 views

CVE-2026-73154

A flaw was found in svxlink. A stack overflow in the StationData::setData function can be triggered by specially crafted input data, potentially allowing a remote attacker to crash the application or achieve arbitrary code execution. Mitigation Update svxlink to version 26.05.1 or later...

5.7AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/11 8:50 a.m.6 views

CVE-2026-73148

A flaw was found in svxlink's svxreflector component. A dangling Json::Value reference is written to after the underlying storage is replaced upon receiving repeated MsgNodeInfo messages. This use-after-free write can lead to a crash or potentially arbitrary code execution. Mitigation Update...

5.6AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/11 8:49 a.m.8 views

CVE-2026-68201

A flaw was found in the ALSA Advanced Linux Sound Architecture timer component of the Linux kernel. When a master timer instance is closed, it does not properly ensure that all associated slave timer callbacks have finished executing before detaching them. This oversight can lead to a...

7.8CVSS5.6AI score0.0017EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/08/11 8:04 a.m.7 views

WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by buitu in WordPress Plugin WP BASE Booking versions = 6.3.0...

10CVSS5.4AI score0.00463EPSS
SaveExploits0Affected Software1
Rockylinux
Rockylinux
added 2026/08/11 6:01 a.m.9 views

perl-DBI:1.641 security update

An update is available for perl-DBI, module.perl-DBI. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The perl-DBI package provides the standard database interfa...

9.8CVSS6.3AI score0.00479EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/11 12:11 a.m.19 views

EUVD-2026-55861

SAP Manufacturing Integration and Intelligence MII allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the...

9.1CVSS5.7AI score0.00671EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70748

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use after free condition exists in Microsoft Office Word, which allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the entire...

7.8CVSS5.8AI score0.00303EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70655

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Deserialization is the process of...

8.8CVSS5.7AI score0.01385EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70730

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

7.8CVSS6AI score0.00404EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70432

Name of the Vulnerable Software and Affected Versions Windows DHCP Client affected versions not specified Description A use after free condition exists in the Windows DHCP Client. This allows an authorized attacker to execute arbitrary code locally or a remote attacker to execute arbitrary code a...

7CVSS5.9AI score0.00246EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70637

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An integer underflow wrap or wraparound occurs, which allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the system. Integer underfl...

7.8CVSS5.7AI score0.0034EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.2 views

PT-2026-70723

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

7.8CVSS6AI score0.00325EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70642

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

7.8CVSS6AI score0.00303EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.6 views

PT-2026-70193

A vulnerability has been identified in Simcenter Femap All versions V2606.0001. The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS5.4AI score0.00113EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.10 views

PT-2026-70563

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A stack-based buffer overflow occurs in the Remote Desktop Client, which allows an unauthorized attacker to execute arbitrary code over a network and affect the system. A...

8.8CVSS6.4AI score0.00625EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.6 views

PT-2026-70804

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code...

9CVSS6.9AI score0.00582EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70894

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the FEM Displacement Constraint task dialog in src/Mod/Fem/Gui/TaskFemConstraintDisplacement.cpp passes the xDisplacementFormula, yDisplacementFormula, and zDisplacementFormula fields of a...

8.5CVSS5.6AI score0.00148EPSS
SaveExploits0References7
Rows per page
Query Builder