Lucene search
+L

6018 matches found

NVD
NVD
added 2026/07/24 12:16 p.m.12 views

CVE-2026-10610

Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user...

8.5CVSS0.00143EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/24 11:14 a.m.11 views

CVE-2026-10610

Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user...

8.5CVSS6.2AI score0.00143EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/07/24 11:14 a.m.36 views

CVE-2026-10610 Local privilege escalation in ESET security applications for macOS

Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user...

8.5CVSS0.00143EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/24 11:14 a.m.15 views

EUVD-2026-48558

Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user...

8.5CVSS6.2AI score0.00143EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/24 10:16 a.m.8 views

CVE-2026-7483

Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user...

8.5CVSS0.00125EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/24 9:40 a.m.42 views

CVE-2026-7483 Local privilege escalation in ESET security applications for macOS

Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user...

8.5CVSS0.00125EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/24 9:40 a.m.80 views

CVE-2026-7483

CVE-2026-7483 describes a local privilege escalation in ESET security applications for macOS that potentially allows a low-privilege attacker to write an arbitrary file with content under a privileged user. The initial and connected documents state the impact as high on confidentiality, integrity...

8.5CVSS5.9AI score0.00125EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/24 9:40 a.m.26 views

EUVD-2026-48551

Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user...

8.5CVSS5.9AI score0.00125EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/24 9:40 a.m.11 views

CVE-2026-7483

Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user...

8.5CVSS5.9AI score0.00125EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/07/24 8:42 a.m.18 views

EUVD-2026-48532

Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the GPU driver, the reference count of the underlyin...

7.8CVSS5.8AI score0.0011EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/24 8:42 a.m.44 views

CVE-2026-49743 GPU DDK - Write UAF of sync checkpoint in GPU kick function after export fence file descriptor is prematurely closed

Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the GPU driver, the reference count of the underlyin...

0.0011EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/24 12:00 a.m.29 views

PT-2026-64422

Name of the Vulnerable Software and Affected Versions Weintek cMT3092X affected versions not specified Description The Weintek cMT3092X HMI contains a flaw where it relies on cookies without proper validation and integrity checking during security decisions. This allows a non-privileged user to...

8.8CVSS5.9AI score0.00315EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/24 12:00 a.m.19 views

PT-2026-64425

Name of the Vulnerable Software and Affected Versions Weintek cMT3092X affected versions not specified Description An incorrect permission assignment for critical resources in the Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges. Recommendations At the...

8.8CVSS5.9AI score0.00274EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/24 12:00 a.m.25 views

PT-2026-64274

Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user...

8.5CVSS5.9AI score0.00125EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/24 12:00 a.m.22 views

PT-2026-64264

Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the GPU driver, the reference count of the underlyin...

5.8AI score0.0011EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/22 12:37 p.m.7 views

CVE-2026-16270

Open Mercato does not validate regex rules. An attacker with privileges to create the regex rule can add an unsafe regex to a field. When someone provide the proper string it can result in a DoS attack. This issue was fixed in version 0.6.4...

6.9CVSS5.3AI score0.00278EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/22 12:37 p.m.15 views

EUVD-2026-47649

Open Mercato does not validate regex rules. An attacker with privileges to create the regex rule can add an unsafe regex to a field. When someone provide the proper string it can result in a DoS attack. This issue was fixed in version 0.6.4...

6.9CVSS5.4AI score0.00278EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/22 11:21 a.m.48 views

CVE-2026-65592

n8n is affected by a stored DOM XSS in the Resource Locator component for versions before 1.123.64, 2.29.8, and 2.30.1. The vulnerability arises because the workflow-persisted cachedResultUrl is passed to window.open() without scheme validation. An attacker with workflow creation/editing privileg...

8.4CVSS5AI score0.00172EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/07/22 12:32 a.m.9 views

EUVD-2026-47583

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index access can submit a request that triggers unbounded recursive processing within the Elasticsearch que...

6.5CVSS5.4AI score0.0024EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/22 12:31 a.m.10 views

EUVD-2026-46888

Vulnerability in Oracle Java SE component: Installation. Supported versions that are affected are Oracle Java SE: 8u491 and 8u491-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE...

6.7CVSS7.3AI score0.0014EPSS
SaveExploits0References2
Rows per page
Query Builder