Lucene search
+L

225338 matches found

OSV
OSV
added 2026/07/14 12:3 a.m.9 views

GHSA-3Q6Q-26VG-V97X Kimai: Improper Authorization Through Activity Creation with Preset Project Allows Creation Under Unauthorized Projects

Summary Kimai 2.56.0 contains an authenticated improper authorization vulnerability in the preset-project activity creation flow. A user with the generic createactivity permission, but without access to a target project, can still create a new Activity under that unauthorized project by visiting...

5.3CVSS6.1AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.22 views

PT-2026-58592

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper access control allows an authorized attacker to perform spoofing over a network, which enables them to affect the system. Recommendations At the moment, there is ...

5.4CVSS6.1AI score0.00356EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.24 views

PT-2026-58624

Name of the Vulnerable Software and Affected Versions Microsoft Extensible Storage Engine affected versions not specified Description Improper access control in the Extensible Storage Engine ESENT allows an authorized attacker to elevate privileges locally, which can lead to full system compromis...

7.8CVSS5.9AI score0.00278EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.24 views

PT-2026-58198

Name of the Vulnerable Software and Affected Versions Windows MIDI Service Module affected versions not specified Description Improper access control in the Windows MIDI Service Module allows an authorized attacker to elevate privileges locally, which can lead to full system compromise...

8.8CVSS5.9AI score0.00214EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.25 views

PT-2026-58846

Name of the Vulnerable Software and Affected Versions Matter SDK connectedhomeip versions prior to 1.4.2 Description A reachable assertion issue exists within the Level Control cluster's periodic server tick logic. A remote, unauthenticated attacker can cause a denial of service by sending a...

7.5CVSS6.1AI score0.00338EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.11 views

PT-2026-58917

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.1 and 2.12.9, an MQTT client could include protocol control characters in subscription filters that were later forwarded as NATS protocol data to route or leafnode connections, corrupti...

7.1CVSS6.1AI score0.00324EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.29 views

PT-2026-58200

Name of the Vulnerable Software and Affected Versions Windows Audio Compression Manager affected versions not specified Description Improper access control in the Windows Audio Compression Manager ACM allows an authorized attacker to elevate privileges locally. Recommendations Install update...

7.8CVSS6.1AI score0.02797EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.22 views

PT-2026-58145

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Insufficient granularity of access control in the Windows StateRepository API allows an authorized attacker to elevate privileges locally. Recommendations Apply the July patch to resolve this...

7.8CVSS5.8AI score0.02797EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.23 views

PT-2026-58195

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is...

7CVSS5.2AI score0.00213EPSS
SaveExploits0References6
Zero Science Lab
Zero Science Lab
added 2026/07/14 12:0 a.m.54 views

SIP Sustainable Irrigation Platform 5.x (cli_control) Remote Code Execution

Summary SIP is a free Raspberry Pi based Python program for controlling irrigation systems sprinkler, drip, hydroponic, etc. It uses web technology to provide an intuitive user interface UI in several languages. The UI can be accessed in your favorite browser on desktop, laptop, and mobile device...

9.8CVSS6.1AI score0.02766EPSS
SaveExploits2
CISA KEV Catalog
CISA KEV Catalog
added 2026/07/14 12:0 a.m.31 views

Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.02333EPSS
SaveIn wildExploits0
Cvelist
Cvelist
added 2026/07/14 12:0 a.m.44 views

CVE-2025-56361

A reachable assertion vulnerability exists in the Matter SDK connectedhomeip 1.3 thru 1.4, specifically within the Level Control cluster's server tick logic emberAfLevelControlClusterServerTickCallback. When a MoveToLevel command is executed and followed by a conflicting write to the OperationMod...

0.00411EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.22 views

PT-2026-58723

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description An issue exists in the WebSocket frame parsing implementation where the library fails to validate length rules defined in RFC 6455 §5.5. This standard requires that all WebSocket control...

7.5CVSS5.4AI score0.00431EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.21 views

PT-2026-58476

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description Insufficient granularity of access control in the Windows Event Logging Service allows an authorized attacker to execute arbitrary code over a network. Recommendations A...

9CVSS6.4AI score0.006EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.28 views

PT-2026-58634

Name of the Vulnerable Software and Affected Versions Visual Studio Code versions prior to 1.128.1 Description The inclusion of functionality from an untrusted control sphere allows an unauthorized attacker to bypass a security feature over a network. Recommendations Update to version 1.128.1...

8.8CVSS6.1AI score0.00767EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.24 views

PT-2026-58325

Name of the Vulnerable Software and Affected Versions Windows Operating Systems affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges locally, potentially enabling a full system takeover. Recommendations At the moment, there is no...

7.8CVSS6.1AI score0.00278EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/14 12:0 a.m.6 views

CVE-2025-56362

A reachable assertion vulnerability exists in the Matter SDK connectedhomeip before 1.4.2, specifically within the Level Control cluster's periodic server tick logic. When a MoveToLevel command is sent and immediately followed by a write of OperationMode=2 in the Pump Configuration and Control...

7.5CVSS6.1AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.29 views

PT-2026-58137

Name of the Vulnerable Software and Affected Versions Microsoft Surface affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version...

7.8CVSS7.1AI score0.00214EPSS
SaveExploits0References5
Oracle linux
Oracle linux
added 2026/07/14 12:0 a.m.13 views

cups security update

1:2.3.3op2-39 - RHEL-177957 CVE-2026-34980 cups: control character injection in option values...

7.5CVSS6.7AI score0.00502EPSS
SaveExploits2
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.24 views

PT-2026-58300

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description An out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when the software...

5.5CVSS5AI score0.00327EPSS
SaveExploits0References6
Rows per page
Query Builder