Lucene search
+L

16820 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•4 views

CVE-2026-48436: Improper Input Validation

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...

6.5CVSS6.7AI score0.00718EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•13 views

PT-2026-70813

Name of the Vulnerable Software and Affected Versions Adobe Commerce affected versions not specified Magento Open Source affected versions not specified Adobe Commerce B2B affected versions not specified Description An incorrect authorization issue exists in the authorization mechanism. An attack...

8.5CVSS6.6AI score0.00632EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•4 views

CVE-2026-65675: Missing Authorization

No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network...

7.1CVSS5.8AI score0.00637EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•6 views

CVE-2026-48411: Incorrect Authorization

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require use...

6.5CVSS6.7AI score0.00632EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•14 views

PT-2026-70376

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An improper input validation issue allows for a security feature bypass. An attacker can exploit this to gain unauthorized write access. This requires user interaction, such a...

7.8CVSS6.6AI score0.00718EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•12 views

PT-2026-70818

Name of the Vulnerable Software and Affected Versions Magento Open Source affected versions not specified Adobe Commerce affected versions not specified Adobe Commerce B2B affected versions not specified Description An incorrect authorization flaw allows a remote attacker to bypass security...

7.8CVSS7.2AI score0.00829EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•22 views

PT-2026-70399

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description An authorization bypass exists that allows an unauthorized attacker to bypass a security feature locally through a user-controlled key. Recommendations At the moment, there is no...

7.8CVSS5.8AI score0.00324EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•4 views

CVE-2026-71390: Improper Input Validation

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user...

4CVSS5.6AI score0.0027EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•15 views

PT-2026-70741

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Visual Studio Code fails to fail securely, a condition known as failing open, which allows an unauthorized attacker to bypass a security feature over a network. Recommendations At...

8.2CVSS5.8AI score0.00541EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•23 views

PT-2026-70661

Name of the Vulnerable Software and Affected Versions Visual Studio Code CoPilot Chat Extension affected versions not specified Description An unauthorized attacker can bypass a security feature over a network within the Visual Studio Code CoPilot Chat Extension. Recommendations At the moment,...

7.1CVSS5.8AI score0.00637EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•2 views

CVE-2026-62899: Inconsistent Interpretation of HTTP Requests

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

5.9CVSS6.3AI score0.00749EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•3 views

CVE-2026-48415: Incorrect Authorization

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing a limited disruption to availability...

8.3CVSS7.3AI score0.00459EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•5 views

CVE-2026-48416: Incorrect Authorization

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction...

7.5CVSS7.3AI score0.00829EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•7 views

PT-2026-70591

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description Inconsistent interpretation of HTTP requests, known as HTTP request/response smuggling, allows an unauthorized attacker to bypass security features over a network. HTTP request smuggling occurs...

5.9CVSS6.2AI score0.00749EPSS
SaveExploits0References79
Tenable Nessus
Tenable Nessus
•added 2026/08/11 12:00 a.m.•26 views

Security Update for Microsoft .NET Core SDK (August 2026)

The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - .NET Elevation of Privilege Vulnerability CVE-2026-58641, CVE-2026-62871, CVE-2026-62886, CVE-2026-62909 - .NET Securit...

7.8CVSS7AI score0.01232EPSS
SaveExploits0References31
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•14 views

PT-2026-70377

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Improper Certificate Validation issue allows for a security feature bypass. An attacker can exploit this to gain unauthorized write access. This requires user interaction,...

5.5CVSS6AI score0.00154EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•6 views

CVE-2026-48437: Improper Certificate Validation

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interactio...

5.5CVSS6AI score0.00154EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•7 views

CVE-2026-34635: Use of Hard-coded Cryptographic Key

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user...

8.4CVSS5.9AI score0.00246EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•1 views

CVE-2026-69278: Incorrect Authorization

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

7.8CVSS5.7AI score0.00324EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•17 views

PT-2026-70740

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Incorrect authorization allows an unauthorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information about a newer version that...

7.8CVSS5.8AI score0.00324EPSS
SaveExploits0References6
Rows per page
Query Builder