Lucene search
+L

107832 matches found

Redos
Redos
added 2026/06/17 12:00 a.m.15 views

ROS-20260617-73-0039

The vulnerability in ImageMagick 7 is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.5CVSS5.5AI score0.00501EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/17 12:00 a.m.39 views

PT-2026-50212

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.155 Description A use-after-free issue exists in the Media component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

9.6CVSS6.2AI score0.00613EPSS
SaveExploits0References41
Positive Technologies
Positive Technologies
added 2026/06/17 12:00 a.m.30 views

PT-2026-50189

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.155 Description A use after free issue in Digital Credentials allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. Use after free is a condition where a program...

9.6CVSS5.8AI score0.00613EPSS
SaveExploits0References41
Positive Technologies
Positive Technologies
added 2026/06/17 12:00 a.m.32 views

PT-2026-50211

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.155 Description An out-of-bounds read exists in WebRTC Web Real-Time Communication, a project that provides websites and applications with real-time communication capabilities in Google Chrome on...

9.6CVSS5.9AI score0.00613EPSS
SaveExploits0References40
Redos
Redos
added 2026/06/17 12:00 a.m.12 views

ROS-20260617-73-0012

The vulnerability of the ReadYUVImage function in the coders/yuv.c file of the ImageMagick console graphics editor is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.5CVSS6.7AI score0.00385EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/17 12:00 a.m.47 views

PT-2026-50208

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.155 Description An inappropriate implementation in the Passwords component allows a remote attacker to leak cross-origin data. This occurs when a user is convinced to perform specific UI gestures on a...

9.6CVSS5.9AI score0.00613EPSS
SaveExploits0References40
Positive Technologies
Positive Technologies
added 2026/06/17 12:00 a.m.30 views

PT-2026-50205

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.155 Description A use after free issue exists in the Tab Strip component. This occurs when a program continues to use a pointer after it has been freed, which can lead to heap corruption a memory...

8.8CVSS5.8AI score0.00613EPSS
SaveExploits0References42
Positive Technologies
Positive Technologies
added 2026/06/17 12:00 a.m.23 views

PT-2026-50213

Name of the Vulnerable Software and Affected Versions Google Chrome on Linux versions prior to 149.0.7827.155 Description An inappropriate implementation in Views allows a remote attacker who has compromised the renderer process to inject arbitrary scripts or HTML via a crafted HTML page. This...

9.6CVSS6AI score0.00613EPSS
SaveExploits0References41
Positive Technologies
Positive Technologies
added 2026/06/17 12:00 a.m.22 views

PT-2026-50434

Name of the Vulnerable Software and Affected Versions Dell PowerFlex Manager affected versions not specified Description Improper Access Control allows a low privileged attacker with remote access to potentially cause a denial of service, a condition where the system becomes unavailable to its...

7.1CVSS5.8AI score0.00183EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/17 12:00 a.m.45 views

PT-2026-50438

Name of the Vulnerable Software and Affected Versions NGINX Plus affected versions not specified NGINX Open Source affected versions not specified Description A flaw in the ngx http proxy v2 module and ngx http grpc module modules can be triggered when NGINX is configured to proxy HTTP/2 traffic...

9.2CVSS7.5AI score0.04022EPSS
SaveExploits2References131
Redos
Redos
added 2026/06/17 12:00 a.m.13 views

ROS-20260617-73-0048

The vulnerability in ImageMagick is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.5CVSS5.5AI score0.00327EPSS
SaveExploits0
Redos
Redos
added 2026/06/17 12:00 a.m.14 views

ROS-20260617-73-0011

The vulnerability of the ReadYUVImage function in the coders/yuv.c file of the ImageMagick console graphics editor is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.5CVSS6.7AI score0.00385EPSS
SaveExploits0
Redos
Redos
added 2026/06/17 12:00 a.m.14 views

ROS-20260617-73-0040

The vulnerability in ImageMagick is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.5CVSS5.5AI score0.00501EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/06/16 7:27 p.m.8 views

CVE-2026-35283

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise...

9.9CVSS5.8AI score0.00411EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2026/06/16 7:17 p.m.59 views

kernel: mptcp: fix slab-use-after-free in __inet_lookup_established

A flaw was found in the Linux kernel's Multipath TCP MPTCP implementation. Due to incorrect memory allocation for IPv6 subflow child sockets, a use-after-free vulnerability exists. A remote attacker could exploit this by triggering concurrent lookups in the kernel's hash table, potentially leadin...

9.8CVSS5.9AI score0.00459EPSS
SaveExploits0References5
OSV
OSV
added 2026/06/16 5:16 p.m.13 views

UBUNTU-CVE-2026-10649

A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial...

8.6CVSS5.9AI score0.00561EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/06/16 4:53 p.m.12 views

gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name SAN could cause the validation process to incorrectly fall back to checking the Common Name CN field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to...

8.2CVSS5.3AI score0.00423EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/06/16 4:53 p.m.11 views

gnutls: gnutls: Security bypass due to incorrect name constraint handling

A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities CAs only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate...

7.4CVSS5.4AI score0.00475EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/06/16 1:46 p.m.39 views

CVE-2026-10831 Improper Authorization of Break Signal Commands in Devices

A denial-of-service vulnerability exists in NPort devices because of improper access control on the command port. The command interface does not properly validate whether a sender is associated with a valid data port session before accepting break signal commands. A remote attacker with network...

6.9CVSS0.00292EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/06/16 12:10 p.m.25 views

postfix: buffer over-read via malformed enhanced status code

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...

7.5CVSS5.7AI score0.00511EPSS
SaveExploits0References5
Rows per page
Query Builder