Lucene search
+L

221985 matches found

BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.9 views

The vulnerability of the RDP client FreeRDP, related to buffer overflow in dynamic memory, allows a hacker to cause a service failure.

The vulnerability of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.6CVSS6.7AI score0.00238EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.11 views

The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.3CVSS7.9AI score0.00207EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.81 views

The vulnerability of Google Chrome’s Navigation function allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s Navigation function is related to improper protection of physical external channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5CVSS6.1AI score0.00187EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.81 views

The vulnerability of Google Chrome’s fullscreen mode allows attackers to carry out spoofing attacks.

The vulnerability of Google Chrome’s fullscreen mode is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

6.4CVSS6.4AI score0.00184EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.83 views

The vulnerability of Google Chrome’s FileSystem component, which allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s FileSystem component is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5.4CVSS5.7AI score0.00255EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.84 views

The vulnerability of Google Chrome’s GPU component, which allows a hacker to trigger a service failure

The vulnerability of Google Chrome’s GPU component is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

5.4CVSS5.7AI score0.00205EPSS
SaveExploits0References8Affected Software4
Positive Technologies
Positive Technologies
added 2026/08/03 12:00 a.m.25 views

PT-2026-67347

A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the application directory, potentially resulting in unauthorized access to connected devices and exposure, modification, or disrupti...

8.4CVSS5.5AI score0.00115EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/03 12:00 a.m.37 views

PT-2026-67387

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server MDS could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful...

9.3CVSS6AI score0.00991EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/03 12:00 a.m.25 views

PT-2026-67447

Ghidra contains an arbitrary code execution vulnerability in the Swift demangler analyzer that allows an attacker to execute arbitrary binaries by supplying a malicious Ghidra project with a crafted Swift tool directory path. When a victim opens the attacker-supplied project, SwiftDemanglerAnalyz...

7.1CVSS6.5AI score0.00206EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.12 views

The vulnerability of the fetch library for axios allows attackers to compromise the accessibility of protected information.

The vulnerability of the axios library’s fetch adapter is related to the unlimited distribution of resources. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information...

5.8CVSS5.5AI score0.005EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/08/03 12:00 a.m.9 views

CVE-2026-52520

Emlog CMS = 2.6.14 contains a stored cross-site scripting XSS vulnerability in the article publishing module /admin/article.php. A remote authenticated attacker can inject arbitrary JavaScript code via the article content. When an administrator reviews or previews the submitted article in the...

5.6AI score0.00165EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.9 views

The vulnerability of the axios library, related to uncontrolled resource consumption, allows attackers to compromise the accessibility of protected information.

The vulnerability of the axios library is related to an uncontrolled resource consumption when processing the maxBodyLength parameter. Exploiting this vulnerability could allow a remote attacker to compromise the accessibility of the protected information...

5.8CVSS5.5AI score0.00429EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.87 views

The vulnerability of the SiteIsolation component in the Google Chrome browser allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s SiteIsolation component is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5CVSS5.9AI score0.00196EPSS
SaveExploits0References11Affected Software5
Positive Technologies
Positive Technologies
added 2026/08/03 12:00 a.m.74 views

PT-2026-67485

Name of the Vulnerable Software and Affected Versions Amazon MQ MCP Server awslabs.amazon-mq-mcp-server versions prior to 2.0.24 Description Improper restriction of intended endpoints in the RabbitMQ broker connection tools may allow a remote unauthenticated actor to obtain Amazon MQ for RabbitMQ...

7.1CVSS5.8AI score0.00252EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/03 12:00 a.m.25 views

PT-2026-67544

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code 'Eval Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...

9.6CVSS6.6AI score0.00486EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/03 12:00 a.m.25 views

PT-2026-67563

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

5.4CVSS5.5AI score0.00143EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/03 12:00 a.m.24 views

PT-2026-67546

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...

9.9CVSS6.6AI score0.00496EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/03 12:00 a.m.27 views

PT-2026-67555

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network...

7.4CVSS5.4AI score0.00503EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/03 12:00 a.m.50 views

CVE-2026-52520

Emlog CMS version 2.6.14 and below is vulnerable to a stored cross-site scripting (XSS) vulnerability within the article publishing module at /admin/article.php . A remote authenticated attacker can inject malicious JavaScript code via the article content. When an administrator previews or review...

5.6AI score0.00165EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/03 12:00 a.m.17 views

EUVD-2026-52484

Emlog CMS = 2.6.14 contains a stored cross-site scripting XSS vulnerability in the article publishing module /admin/article.php. A remote authenticated attacker can inject arbitrary JavaScript code via the article content. When an administrator reviews or previews the submitted article in the...

5.6AI score0.00165EPSS
SaveExploits0References2
Rows per page
Query Builder