Lucene search
+L

11311 matches found

NVD
NVD
•added 2026/10/13 9:17 p.m.•12 views

CVE-2026-14532

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception...

4.3CVSS0.00215EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/13 8:17 p.m.•23 views

CVE-2026-95696 IBM WebSphere Application Server Liberty Denial of Service

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception...

6.5CVSS0.00331EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 8:17 p.m.•22 views

CVE-2026-95696

IBM WebSphere Application Server - Liberty versions 20.0.0.12 through 26.0.0.10 are vulnerable to a denial of service (DoS) attack. The root cause is an uncaught exception triggered by uncontrolled resource consumption (CWE-400) when the grpc-1.0 feature is enabled. A remote attacker can exploit ...

7.5CVSS5.9AI score0.00331EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/13 8:15 p.m.•37 views

CVE-2026-14532

IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9 are vulnerable to an Integer Overflow (CWE-190) that allows an attacker with Reader-role privileges to obtain version information, which can trigger an uncaught exception . This issue also affects IBM Tivoli Application...

4.3CVSS5.8AI score0.00215EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/13 8:15 p.m.•20 views

CVE-2026-14532 IBM WebSphere Application Server Liberty Integer Overflow

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception...

4.3CVSS0.00215EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:21 p.m.•12 views

CVE-2026-88099

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...

5.9CVSS0.00818EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/13 7:05 p.m.•31 views

CVE-2026-102599 Socket.IO: Engine.IO Protocol Revision Mismatch DoS

Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engine.IO protocol revision from the upgrade request instead of enforcing the revision stored on the existing session. A malicious...

7.5CVSS0.00576EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/13 6:17 p.m.•22 views

CVE-2026-106170

An Uncaught Exception vulnerability CWE-248 vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests...

4.9CVSS0.00284EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/13 5:37 p.m.•42 views

CVE-2026-106170

An Uncaught Exception vulnerability CWE-248 vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests...

4.9CVSS0.00284EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/10/13 4:00 p.m.•9 views

Jordan Harband: Improper exception handling leads to vulnerabilities

Jordan Harband versions from 6.7.0 to 6.16.1 have security vulnerabilities. This vulnerability arises from improper string coercion of array elements when using arrayFormat with a comma. When elements cannot be converted to strings, a type error will occur, potentially allowing unverified attacke...

6.3CVSS5.9AI score0.00368EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/13 10:17 a.m.•12 views

CVE-2026-85115

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.62. Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtai...

6.8CVSS0.00109EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/13 9:18 a.m.•45 views

CVE-2026-85115

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.62. Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtai...

6.8CVSS0.00109EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 9:18 a.m.•26 views

CVE-2026-85115

A vulnerability exists in the .NET Client Library for SIMATIC S7 Webserver API (all versions

6.8CVSS5.7AI score0.00109EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•10 views

PT-2026-113395

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 20.0.0.12 through 26.0.0.10 Description A remote attacker can cause a denial of service by triggering an uncaught exception. Recommendations At the moment, there is no information about a new...

7.5CVSS5.7AI score0.00331EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-14532: Integer Overflow or Wraparound

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception...

4.3CVSS5.8AI score0.00215EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

Microsoft Windows: CVE-2026-96945: Windows Failover Cluster Denial of Service Vulnerability

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.01054EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-102599: Uncaught Exception

Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engine.IO protocol revision from the upgrade request instead of enforcing the revision stored on the existing session. A malicious...

7.5CVSS6AI score0.00576EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-95696: Uncontrolled Resource Consumption

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception...

7.5CVSS5.9AI score0.00331EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•17 views

PT-2026-111780

Name of the Vulnerable Software and Affected Versions FortiSandbox versions 5.2.0 through 5.2.1 FortiSandbox versions 5.0.0 through 5.0.6 FortiSandbox 4.4 affected versions not specified Description An uncaught exception in the Admin Profile occurs when handling exceptional conditions, which may...

4.9CVSS5.5AI score0.00284EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•11 views

PT-2026-113147

Name of the Vulnerable Software and Affected Versions Windows Failover Cluster affected versions not specified Description An uncaught exception in Windows Failover Cluster allows an unauthorized attacker to cause a denial-of-service over a network, affecting the system's availability...

7.5CVSS5.7AI score0.01054EPSS
SaveExploits0References5
Rows per page
Query Builder