Lucene search
+L

31390 matches found

Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.15 views

PT-2026-48112

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. Secure Boot is a security standard that ensures a device boots using...

7.9CVSS5.4AI score0.00268EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.17 views

PT-2026-48110

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. Secure Boot is a security standard developed by members of the PC...

7.9CVSS5.4AI score0.00303EPSS
SaveExploits0References6
Redos
Redos
added 2026/06/09 12:00 a.m.16 views

ROS-20260609-73-0016

The vulnerability in Thunderbird relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

9.8CVSS5.4AI score0.00424EPSS
SaveExploits0
Redos
Redos
added 2026/06/09 12:00 a.m.16 views

ROS-20260609-73-0018

The vulnerability of the WebRender component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.5CVSS5.4AI score0.00352EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.34 views

PT-2026-47778

Name of the Vulnerable Software and Affected Versions 389 Directory Server affected versions not specified Description The dereference control plugin fails to check for allocation failure before utilizing a Basic Encoding Rules BER structure. This allows an unauthenticated remote attacker to caus...

7.5CVSS6AI score0.00583EPSS
SaveExploits0References72
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.18 views

PT-2026-48108

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. Secure Boot is a security standard developed by members of the PC...

7.9CVSS5.4AI score0.01029EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:00 a.m.22 views

Adobe Acrobat Reader DC Multimedia Rendition Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS5.9AI score0.00329EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.36 views

PT-2026-47839

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description An error in the callback used to verify certificates during a Root CA key update in the Certificate Management Protocol CMP renders certificate validation ineffectual. Specifically, a typo in...

9.1CVSS5.8AI score0.01165EPSS
SaveExploits0References100
Redos
Redos
added 2026/06/09 12:00 a.m.18 views

ROS-20260609-73-0006

The vulnerability of the jpegimageload function in the image loading library GdkPixbuf is related to the situation where the operation exits the buffer boundaries in memory when processing a specially created JPEG image. Exploiting this vulnerability could allow a malicious actor to cause service...

7.5CVSS5.7AI score0.01069EPSS
SaveExploits1
Redos
Redos
added 2026/06/09 12:00 a.m.17 views

ROS-20260609-73-0024

Vulnerability of the Audio/Video component: Playback in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploitation of this vulnerability can allow a remote attacker to cause service failures...

7.5CVSS5.5AI score0.00687EPSS
SaveExploits0
Redos
Redos
added 2026/06/09 12:00 a.m.15 views

ROS-20260609-73-0039

The vulnerability in Thunderbird is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.5CVSS5.4AI score0.00307EPSS
SaveExploits0
Redos
Redos
added 2026/06/09 12:00 a.m.12 views

ROS-20260609-73-0029

The vulnerability in Thunderbird is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS5.4AI score0.00414EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.27 views

PT-2026-47979

Name of the Vulnerable Software and Affected Versions Windows Secure Boot affected versions not specified Description A protection mechanism failure in Windows Secure Boot allows an authorized attacker to locally bypass a security feature. Recommendations At the moment, there is no information...

7.9CVSS5.2AI score0.00303EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.16 views

PT-2026-48105

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally, which can affect the system. Recommendations At the moment, there is ...

7.9CVSS5.4AI score0.00303EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.18 views

PT-2026-48107

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. Secure Boot is a security standard developed by members of the PC...

7.9CVSS5.8AI score0.00303EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.21 views

PT-2026-47755

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where hugetlb VMA lock allocation is incorrectly handled during the mmap prepare stage. If an allocation fails after mmap prepare is called, it may...

5.5CVSS5.3AI score0.001EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.32 views

PT-2026-47759

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel when the build skb function fails within the tun xdp one function. In this scenario, the system sets the return value to -ENOMEM and exits withou...

7.1CVSS5.4AI score0.00129EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.24 views

PT-2026-47757

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the tap get user xdp function. When a frame is shorter than ETH HLEN, the function returns -EINVAL; similarly, it returns -ENOMEM if build skb fails. In both...

8.2CVSS5.3AI score0.00235EPSS
SaveExploits0
Redos
Redos
added 2026/06/09 12:00 a.m.20 views

ROS-20260609-73-0020

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient testing for unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.5CVSS5.4AI score0.00687EPSS
SaveExploits0
OSV
OSV
added 2026/06/08 7:29 p.m.5 views

CVE-2026-35058

Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and cause a denial of service via a specially crafted packet...

6.9CVSS5.3AI score
SaveExploits0References6
Rows per page
Query Builder