Lucene search
+L

129254 matches found

Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.18 views

PT-2026-58269

Name of the Vulnerable Software and Affected Versions Windows RDP affected versions not specified Description An out-of-bounds read in Windows Remote Desktop Protocol RDP allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs when a program reads data...

6.5CVSS6.1AI score0.00651EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.14 views

PT-2026-58455

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Web Proxy Auto-Discovery Protocol WPAD. This flaw allows an authorized attacker with local access to elevate their privileges on the system....

7.8CVSS6.2AI score0.0024EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.18 views

PT-2026-58517

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An out-of-bounds read in the Remote Desktop Protocol RDP allows an unauthorized attacker to disclose information over a network. This issue can be triggered when a user interacts with a...

6.5CVSS6.1AI score0.00651EPSS
SaveExploits0References5
Redos
Redos
added 2026/07/14 12:0 a.m.9 views

ROS-20260714-73-0019

The vulnerability of the spotlightdissectqueryloop function in the AFP protocol analyzer Spotlight, a traffic analysis tool for computer networks developed by Wireshark, is related to an uncontrolled recursion. Exploiting this vulnerability could allow attackers to cause service failures...

5.5CVSS6.2AI score0.00122EPSS
SaveExploits1
Redos
Redos
added 2026/07/14 12:0 a.m.9 views

ROS-20260714-73-0002

The vulnerability of the RTSP protocol analyzer and the network traffic analyzer in Wireshark is related to pointer manipulation. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6.2AI score0.00124EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.15 views

PT-2026-58160

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An issue exists where the allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to cause a denial-of-service over a...

7.8CVSS7AI score0.0078EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.20 views

PT-2026-58607

Name of the Vulnerable Software and Affected Versions Windows 10 Windows 11 Windows Server affected versions not specified Description An uninitialized resource flaw in the Windows Remote Desktop Protocol RDP allows an unauthorized and unauthenticated attacker to execute arbitrary code over a...

9.8CVSS6.3AI score0.01088EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.14 views

PT-2026-58661

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An integer overflow or wraparound in the Remote Desktop Protocol RDP allows an unauthorized attacker to execute arbitrary code over a network. Recommendations At the moment, there i...

8.8CVSS6.4AI score0.00767EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.14 views

PT-2026-58214

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A use after free issue in the Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network. Use after free is a memory corruption fla...

8.1CVSS6.2AI score0.00662EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.18 views

KB5101650: Windows 11 Version 24H2 / Windows 11 Version 25H2 Security Update (July 2026)

The remote Windows host is missing security update 5101650. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

9.9CVSS7.3AI score0.035EPSS
SaveExploits11References379
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.19 views

PT-2026-58060

Name of the Vulnerable Software and Affected Versions Rockwell Automation FLEX 5000 adapters affected versions not specified Description A denial-of-service issue occurs due to improper handling of exceptional conditions when processing crafted CIP Common Industrial Protocol packets sent to the...

8.7CVSS6.1AI score0.0032EPSS
SaveExploits0References3
Redos
Redos
added 2026/07/14 12:0 a.m.11 views

ROS-20260714-73-0006

The vulnerability of the DCP-ETSI protocol analyzer, which is part of the Wireshark network traffic analyzer, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6.3AI score0.0016EPSS
SaveExploits1
Redos
Redos
added 2026/07/14 12:0 a.m.10 views

ROS-20260714-73-0016

The vulnerability of the dissectbeeptree function in the BEEP protocol analyzer for computer network traffic analysis tool Wireshark is related to the execution of a loop with a potentially overflowing buffer in the stack. Exploiting this vulnerability can allow attackers to cause service failure...

5.5CVSS6.3AI score0.0018EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.13 views

PT-2026-60063

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.136.Final Netty versions prior to 4.2.16.Final Description The io.netty.handler.codec.stomp.StompSubframeDecoder fails to limit the total number of headers or their cumulative size per frame. While the maxLineLength...

7.5CVSS5.9AI score0.00423EPSS
SaveExploits1References39
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.12 views

PT-2026-58423

Name of the Vulnerable Software and Affected Versions Windows RDP affected versions not specified Description A buffer over-read in Windows RDP allows an unauthorized attacker to disclose sensitive information over a network and affect the system. A buffer over-read occurs when a program reads mo...

6.5CVSS6.1AI score0.00651EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2026/07/14 12:0 a.m.10 views

The vulnerability of the contains_dotdot() function in the RDP client FreeRDP allows a hacker to read and write arbitrary files.

The vulnerability of the contains.dot function in the RDP client FreeRDP is related to a single-byte offset error. Exploiting this vulnerability could allow an attacker to read and write arbitrary files remotely...

6.4CVSS6.1AI score0.002EPSS
SaveExploits1References3Affected Software2
Redos
Redos
added 2026/07/14 12:0 a.m.8 views

ROS-20260714-73-0031

The vulnerability of the GNW protocol analyzer, which is part of the Wireshark network traffic analyzer, relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6.3AI score0.00124EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.25 views

PT-2026-58247

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...

6.5CVSS6.1AI score0.00651EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.13 views

PT-2026-58172

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An integer overflow or wraparound in the Web Proxy Auto-Discovery Protocol WPAD allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...

7.8CVSS7.1AI score0.02112EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/13 10:16 p.m.12 views

CVE-2026-62197

OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebSocket URLs. Attackers with lower-trust access can reach network destinations that should have been blocked by OpenClaw policy when the affected feature is enabled...

8.5CVSS0.00199EPSS
SaveExploits0References2
Rows per page
Query Builder