Lucene search
+L

209234 matches found

Cvelist
Cvelist
•added 2026/09/07 1:57 a.m.•51 views

CVE-2026-20500

In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232...

0.00094EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/07 1:57 a.m.•15 views

CVE-2026-20500

In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232...

5.9AI score0.00094EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/07 1:57 a.m.•47 views

CVE-2026-20500

A vulnerability exists in the Modem component due to improper input validation , which can lead to a system crash . This flaw results in a local denial of service and requires User execution privileges and user interaction for exploitation. Remediation is available via Patch ID: MOLY01810811 (Iss...

5.5CVSS5.9AI score0.00094EPSS
SaveExploits0References1Affected Software1
Redos
Redos
•added 2026/09/07 12:00 a.m.•11 views

ROS-20260907-73-0059

The vulnerability in Erlang relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

8.8CVSS7.6AI score0.00497EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•26 views

PT-2026-86815

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.46 Description Unauthenticated or weakly constrained request paths allow persistent work without adequate input bounds or rate limiting. Specifically, the '/users/forgot password-reset' endpoint accepts an...

8.7CVSS5.8AI score0.00542EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86873

In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log...

2.8CVSS5.8AI score0.0039EPSS
SaveExploits0References2
Redos
Redos
•added 2026/09/07 12:00 a.m.•9 views

ROS-20260907-73-0042

The vulnerability in Erlang is related to incorrect input of configuration data. Exploitation of this vulnerability can be carried out remotely...

8.2CVSS7.3AI score0.00481EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•18 views

PT-2026-86607

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246...

5.8AI score0.00108EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/07 12:00 a.m.•11 views

TencentOS Server 4: iperf3 (TSSA-2026:0958)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0958 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

7.5CVSS6.1AI score0.00824EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•18 views

PT-2026-86670

HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security issues...

3.5CVSS5.7AI score0.00147EPSS
SaveExploits0References2
Redos
Redos
•added 2026/09/07 12:00 a.m.•8 views

ROS-20260907-73-0021

The vulnerability in the buildkit is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

5.3CVSS6.5AI score0.00357EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/09/07 12:00 a.m.•17 views

Debian dsa-6488 : jbig2dec - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6488 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6488-1 [email protected] https://www.debian.org/security/ Moritz...

7.5CVSS7.4AI score0.00441EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/07 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-80882

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Ensure the ENOMEM...

6AI score0.00209EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•26 views

PT-2026-86930

Name of the Vulnerable Software and Affected Versions knowns versions prior to 0.30.0 Description Insufficient validation of filesystem paths in MCP tool arguments allows attackers to perform directory traversal. By supplying path arguments containing traversal sequences, an attacker can read,...

8.8CVSS5.9AI score0.01079EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/07 12:00 a.m.•5 views

CVE-2022-51015: Improper Input Validation

PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket for STARTBREAK and CRACKBREAK actions or in UseItemTransactionData typically within InventoryTransactionPacket. A remote authenticated attacker can send crafted packets with invalid facing values e.g., negative or...

7.1CVSS5.9AI score0.00675EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•25 views

PT-2026-86672

HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance or availability...

3.5CVSS5.7AI score0.00163EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2026/09/07 12:00 a.m.•13 views

VulnCheck KEV: CVE-2023-37569

This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system. Successful exploitation of this vulnerability could allow the attacker ...

8.8CVSS8.3AI score0.33886EPSS
SaveIn wildExploits4References11
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•21 views

PT-2026-86990

Name of the Vulnerable Software and Affected Versions Easy Appointments versions prior to 4.0.2.2 Description Insufficient input sanitization and output escaping lead to DOM-Based and Stored Cross-Site Scripting XSS, a condition where arbitrary web scripts are injected into pages and executed whe...

7.1CVSS6.2AI score0.00251EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•20 views

PT-2026-86772

PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. Attackers can send crafted item IDs outside the valid range to trigger an uncaught exception that crashes the server...

7.1CVSS5.8AI score0.00508EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•22 views

PT-2026-86596

In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232...

5.8AI score0.00094EPSS
SaveExploits0References2
Rows per page
Query Builder