Lucene search
+L

224124 matches found

EUVD
EUVD
added yesterday8 views

EUVD-2026-52640

The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...

8.5CVSS5.6AI score0.00116EPSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday28 views

CVE-2026-18759 An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync.

The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...

8.5CVSS0.00116EPSS
SaveExploits0References1
CVE
CVE
added yesterday15 views

CVE-2026-18759

CVE-2026-18759 affects ASUSTOR Backup Plan (ABP) and ASUSTOR EZ Sync (AES): a file-based IPC protected by AES can be abused by a local authenticated user to recover the IPC key (readable by standard users, DPAPI-protected) and forge IPC requests. Combined with an insufficient substring check for ...

8.5CVSS5.6AI score0.00116EPSS
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-52639

A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...

7.3CVSS6AI score0.00128EPSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday27 views

CVE-2026-18755 GV-ASManager DLL hijacking vulnerability

A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...

7.3CVSS0.00128EPSS
SaveExploits0References1
CVE
CVE
added yesterday13 views

CVE-2026-18755

The CVE-2026-18755 entry describes a DLL hijacking vulnerability in GeoVision GV-ASManager. An attacker who has write access to an unsafe application search directory can place a crafted DLL into the search path, causing the GV-ASManager process to load and execute the malicious library with its ...

7.3CVSS6AI score0.00128EPSS
SaveExploits0References1
NVD
NVD
added yesterday5 views

CVE-2026-18739

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS0.00095EPSS
SaveExploits0References2
NVD
NVD
added yesterday7 views

CVE-2026-68744

A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be transmitted to the client. A local attacker can exploit this to...

3.3CVSS0.00097EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added yesterday6 views

kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown

A flaw was found in the Linux kernel. A race condition exists in the timershutdownsync function, where a timer's function pointer can be set to NULL while the timer is still active on another processor. This can be exploited by a local attacker to trigger a kernel warning, potentially leading to...

4.7CVSS5.5AI score0.00197EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-18739

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS6AI score0.00095EPSS
SaveExploits0References3
Cvelist
Cvelist
added yesterday23 views

CVE-2026-18739 Popt-devel: popt-static: off-by-one in poptstuffargs

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS0.00095EPSS
SaveExploits0References2
EUVD
EUVD
added yesterday7 views

EUVD-2026-52577

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS6AI score0.00095EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added yesterday4 views

CVE-2026-18739 Popt-devel: popt-static: off-by-one in poptstuffargs

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS6AI score0.00095EPSS
SaveExploits0References2
CVE
CVE
added yesterday13 views

CVE-2026-18739

The CVE concerns the popt library, specifically a vulnerability in the function poptStuffArgs . An off-by-one condition occurs when the function is called repeatedly by a host application or through deep alias nesting, which can corrupt internal program data. The description states this corruptio...

2.5CVSS6AI score0.00095EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added yesterday9 views

CVE-2026-18739

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

2.5CVSS6AI score0.00095EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added yesterday10 views

kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown

A flaw was found in the Linux kernel. A race condition exists in the timershutdownsync function, where a timer's function pointer can be set to NULL while the timer is still active on another processor. This can be exploited by a local attacker to trigger a kernel warning, potentially leading to...

4.7CVSS5.5AI score0.00197EPSS
SaveExploits0References5
NVD
NVD
added yesterday9 views

CVE-2026-17614

A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile and getConfigurationFile methods in wildfly-core/deployment-repository do not validate that the resolved file path remains within the configured repository or configuration root directories. A...

4.4CVSS0.0085EPSS
SaveExploits0References2
EUVD
EUVD
added yesterday8 views

EUVD-2026-52568

A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile and getConfigurationFile methods in wildfly-core/deployment-repository do not validate that the resolved file path remains within the configured repository or configuration root directories. A...

4.4CVSS5.7AI score0.0085EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-56845

An unauthenticated path traversal LFI vulnerability exists under /custom-sounds/ when CustomSounds storage is configured to FileSystem. By including ../ sequences in the request path, an attacker can read arbitrary files outside the base directory...

7.5CVSS7.3AI score0.0036EPSS
SaveExploits0References2
EUVD
EUVD
added yesterday6 views

EUVD-2026-52560

An unauthenticated path traversal LFI vulnerability exists under /custom-sounds/ when CustomSounds storage is configured to FileSystem. By including ../ sequences in the request path, an attacker can read arbitrary files outside the base directory...

7.5CVSS5.6AI score0.0036EPSS
SaveExploits0References1
Rows per page
Query Builder