Lucene search
+L

2246 matches found

BDU FSTEC
BDU FSTEC
•added 2026/10/09 1:18 p.m.•57 views

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

9CVSS6.9AI score0.02695EPSS
SaveExploits2References2
Nuclei
Nuclei
•added 2026/10/08 2:15 a.m.•66 views

ZenML ZenML Server - Improper Authentication

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/usernameorid/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. id: CVE-2024-25723 info:...

8.8CVSS7.2AI score0.70785EPSS
SaveExploits1References5
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•14 views

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.7AI score0.00345EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/05 1:39 a.m.•43 views

CVE-2026-20526

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation...

0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/05 1:39 a.m.•45 views

CVE-2026-20520

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/05 1:39 a.m.•46 views

CVE-2026-20519

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

0.00228EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•4 views

CVE-2026-55280: Use of Uninitialized Variable

In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS6AI score0.00231EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•5 views

CVE-2026-20520: Out-of-bounds Write

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

7.5CVSS6AI score0.00228EPSS
SaveExploits0References2
OSV
OSV
•added 2026/10/01 12:00 a.m.•8 views

ASB-A-522373576

In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS6AI score0.00231EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/09/30 12:00 a.m.•11 views

The vulnerability of the Azure SQL Database, a cloud relational database, stems from the lack of protection for SQL query structures, allowing attackers to exploit their privileges.

The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

9.9CVSS6.5AI score0.00987EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/09/29 12:00 a.m.•8 views

The vulnerability of the Adobe Connect instant messaging program lies in the lack of protective measures for the website structure, allowing attackers to escalate their privileges.

The vulnerability of the Adobe Connect instant messaging program relates to the lack of security measures for the website structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

9.4CVSS6.5AI score0.00304EPSS
SaveExploits0References2Affected Software2
Nuclei
Nuclei
•added 2026/09/23 2:05 a.m.•215 views

Apache CouchDB 1.7.0 / 2.x < 2.1.1 - Remote Privilege Escalation

Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to submit users documents with duplicate keysfor 'roles' used for access control within the database, including the special case 'admin' role, th...

10CVSS7.9AI score0.99838EPSS
SaveExploits27References5
GithubExploit
GithubExploit
•added 2026/09/19 12:58 p.m.•44 views

Exploit for Protection Mechanism Failure in Intel Transfer_Learning_Tool

Comprehensive Security Analysis of CVE-2026-39452: Protection...

7.3CVSS6.5AI score0.00332EPSS
SaveExploits1
NVD
NVD
•added 2026/09/15 7:17 p.m.•13 views

CVE-2026-56942

In ReadTileInfo of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS0.00372EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•39 views

CVE-2026-56997

In Av1DecodeFrameTag of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00372EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/15 6:34 p.m.•34 views

CVE-2026-56997

A vulnerability exists in the Av1DecodeFrameTag of vp9hwd_headers.cc due to a missing bounds check, which can result in an out-of-bounds write . This flaw could lead to remote escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The issue specifical...

8.8CVSS6.1AI score0.00372EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/15 6:34 p.m.•14 views

CVE-2026-56997

In Av1DecodeFrameTag of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.1AI score0.00372EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/15 6:34 p.m.•13 views

CVE-2026-56960

In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.3AI score0.00401EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/15 6:34 p.m.•14 views

CVE-2026-56942

In ReadTileInfo of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.1AI score0.00372EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/15 6:33 p.m.•46 views

CVE-2026-0170

A vulnerability in the Vp9DecodeFrameTag function of vp9hwd_headers.cc allows for a possible out-of-bounds write due to a missing bounds check. This flaw could lead to remote escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The issue specificall...

8.8CVSS6.1AI score0.00277EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder