Lucene search
+L

272141 matches found

OSV
OSV
added 2026/09/08 5:57 p.m.9 views

GHSA-XP7J-H7JC-4W8P Semaphore U: OS Command Injection

Summary An OS command injection in repository giturl handling lets any user holding the Manager or Owner role on any project the normal project-collaborator roles achieve remote code execution on the Semaphore server host. Using git's --upload-pack= option, an attacker runs arbitrary commands. Th...

9.9CVSS6.4AI score0.0156EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/09/08 5:56 p.m.8 views

EUVD-2026-66708

Gitea: Remote Code Execution via diffpatch Git Hook Installation...

9.8CVSS8.5AI score0.86777EPSS
SaveExploits14References11
OSV
OSV
added 2026/09/08 5:56 p.m.5 views

GHSA-RCR6-4JQH-J84M Gitea: Remote Code Execution via diffpatch Git Hook Installation

Summary Gitea's diffpatch endpoint can be abused to install and execute a Git hook from repository-controlled content. An attacker with ordinary write access to a repository can execute arbitrary shell commands as the Gitea OS user. With default open registration, an unauthenticated visitor can...

9.8CVSS9.1AI score0.86777EPSS
SaveExploits14References12
CVE
CVE
added 2026/09/08 5:19 p.m.57 views

CVE-2026-83997

CVE-2026-83997 is a use-after-free vulnerability in Windows Message Queuing that allows an unauthorized attacker to achieve remote code execution over the network. The CNA-assigned CVSS 3.1 score is 8.1 (HIGH) , with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network attack vecto...

8.1CVSS6.5AI score0.00503EPSS
SaveExploits0References1Affected Software8
CVE
CVE
added 2026/09/08 5:19 p.m.16 views

CVE-2026-83992

CVE-2026-83992 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network reachability with low ...

8.8CVSS6.3AI score0.00596EPSS
SaveExploits0References1Affected Software13
EUVD
EUVD
added 2026/09/08 5:19 p.m.9 views

EUVD-2026-73895

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00837EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 5:19 p.m.6 views

EUVD-2026-73883

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00751EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 5:19 p.m.6 views

EUVD-2026-73877

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00596EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:19 p.m.47 views

CVE-2026-81952

CVE-2026-81952 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network . The CVSS 3.1 score is 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e.g., op...

8.8CVSS6.3AI score0.00596EPSS
SaveExploits0References1Affected Software6
EUVD
EUVD
added 2026/09/08 5:19 p.m.11 views

EUVD-2026-73875

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00597EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:19 p.m.40 views

CVE-2026-81955

A heap-based buffer overflow in the Microsoft Windows Graphics Component allows an unauthorized, remote attacker to achieve code execution over a network . The vulnerability requires user interaction but no prior privileges. Microsoft rates it CVSS 8.8 (HIGH) with full impact on confidentiality, ...

8.8CVSS6.3AI score0.00597EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:18 p.m.14 views

CVE-2026-81385

Microsoft Office Publisher is affected by a deserialization of untrusted data vulnerability that allows an unauthorized, remote attacker to achieve remote code execution over a network with low complexity and no required privileges, though user interaction is required. The CVSS 3.1 score is 8.8 (...

8.8CVSS6AI score0.01023EPSS
SaveExploits0References1Affected Software5
EUVD
EUVD
added 2026/09/08 5:18 p.m.5 views

EUVD-2026-73848

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.0049EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 5:18 p.m.6 views

EUVD-2026-73840

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00472EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:18 p.m.20 views

CVE-2026-80085

CVE-2026-80085 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a crafted document) but no prior authentication, yielding high impact to confidentialit...

8.8CVSS6.3AI score0.00472EPSS
SaveExploits0References1Affected Software6
CVE
CVE
added 2026/09/08 5:18 p.m.21 views

CVE-2026-78526

CVE-2026-78526 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with an attack vector of network, low complexity, no privileges required, and user interaction requ...

8.8CVSS6.3AI score0.00594EPSS
SaveExploits0References1Affected Software6
EUVD
EUVD
added 2026/09/08 5:18 p.m.5 views

EUVD-2026-73830

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

6.5CVSS6AI score0.00704EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 5:18 p.m.4 views

EUVD-2026-73827

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00594EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:18 p.m.52 views

CVE-2026-78519

CVE-2026-78519 is a use of uninitialized resource vulnerability in Microsoft Office Outlook that allows an unauthorized, remote attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with low attack complexity and no privileges required, though user interaction is required to...

8.8CVSS6AI score0.00604EPSS
SaveExploits0References1Affected Software5
CVE
CVE
added 2026/09/08 5:18 p.m.14 views

CVE-2026-77481

CVE-2026-77481 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges required) to achieve remote code execution over a network . The CVSS 3.1 base score is 8.8 (HIGH) , with high impact to confidentiality, integrity, and availability, and no us...

8.8CVSS6.3AI score0.00618EPSS
SaveExploits0References1Affected Software4
Rows per page
Query Builder