Lucene search
+L

2430 matches found

Hacker One
Hacker One
added 2026/04/16 9:24 a.m.15 views

Revive Adserver: Missing access control when modifying parent entities via XML‑RPC

Vulnerability description not provided...

4.3CVSS5.8AI score0.00244EPSS
SaveExploits0
OSV
OSV
added 2026/04/16 12:41 a.m.6 views

CLEANSTART-2026-YM63226 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the pulumi-kubernetes-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

9.8CVSS6.7AI score0.01557EPSS
SaveExploits2References19
OSV
OSV
added 2026/04/16 12:38 a.m.8 views

CLEANSTART-2026-GN18755 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the calico package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

9.8CVSS7.2AI score0.01557EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2026/04/15 7:23 p.m.6 views

CVE-2026-26183

Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/14 6:30 p.m.8 views

EUVD-2026-22518

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00443EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/14 6:30 p.m.6 views

EUVD-2026-22428

Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00256EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/14 6:30 p.m.4 views

EUVD-2025-209453

An improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer Cloud 7.6.0 through 7.6.4,...

7.2CVSS6AI score0.00511EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/14 6:17 p.m.5 views

CVE-2026-32085

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an authorized attacker to disclose information locally...

5.5CVSS0.00443EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/14 6:16 p.m.7 views

CVE-2026-26183

Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00256EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/14 4:57 p.m.34 views

CVE-2026-32085 Remote Procedure Call Information Disclosure Vulnerability

...

5.5CVSS0.00443EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/14 4:57 p.m.6 views

CVE-2026-32085 Remote Procedure Call Information Disclosure Vulnerability

...

5.5CVSS5.8AI score0.00443EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/14 4:57 p.m.36 views

CVE-2026-32085

CVE-2026-32085 affects Windows Remote Procedure Call and corresponds to an information-disclosure vulnerability that can allow an authenticated local attacker to read sensitive data. The NVD/NCSC/MSRC entries confirm this vulnerability and note that Microsoft has released updates to fix the issue...

5.5CVSS5.7AI score0.00443EPSS
SaveExploits0References1Affected Software13
NVD
NVD
added 2026/04/14 4:16 p.m.14 views

CVE-2025-61848

An improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer Cloud 7.6.0 through 7.6.4,...

7.2CVSS0.00511EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/14 3:38 p.m.37 views

CVE-2025-61848

CVE-2025-61848 is an SQL injection vulnerability caused by improper neutralization of special elements in Fortinet products (FortiAnalyzer, FortiManager, and their Cloud variants) across multiple 7.x releases. The flaw may allow a privileged authenticated attacker to execute unauthorized code or ...

7.2CVSS6AI score0.00511EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.5 views

Remote Procedure Call Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an authorized attacker to disclose information locally...

5.5CVSS6.2AI score0.00443EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.17 views

Microsoft Windows 访问控制错误漏洞

Microsoft Windows is an operating system used on personal devices by the American company Microsoft. The Microsoft Windows RPC API contains a vulnerability related to access control errors. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are...

7.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.6 views

PT-2026-32760

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper access control in the Windows RPC API allows an authorized attacker to elevate privileges locally and affect the system. Recommendations At the moment, there is no information about ...

7.8CVSS6.2AI score0.00256EPSS
SaveExploits0References7
Kaspersky
Kaspersky
added 2026/04/14 12:0 a.m.16 views

KLA90980 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges, spoof user interface, execute arbitrary code, cause denial of service, read local...

8CVSS7.1AI score0.63686EPSS
SaveExploits3References121
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.9 views

Microsoft Windows Remote Procedure Call 信息泄露漏洞

Microsoft Windows Remote Procedure Call is a powerful technology developed by Microsoft for creating distributed client/server programs. There is an information leakage vulnerability in Microsoft Windows Remote Procedure Call. Attackers can exploit this vulnerability to obtain sensitive...

5.5CVSS5.8AI score0.00443EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/13 7:23 p.m.9 views

CVE-2026-33783

A Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juniper Networks Junos OS Evolved on PTX Series allows a network-based, authenticated attacker with low privileges to cause a complete Denial of Service DoS. If colored SRTE policy tunnels are provisioned via...

7.1CVSS5.8AI score0.0024EPSS
SaveExploits0References1
Rows per page
Query Builder