Lucene search
+L

274210 matches found

Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.15 views

PT-2026-79234

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack-based buffer overflow allows a remote authenticated attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a...

8.5CVSS6.4AI score0.00442EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.10 views

PT-2026-79199

Name of the Vulnerable Software and Affected Versions Azure Managed Instance for Apache Cassandra affected versions not specified Description Improper neutralization of argument delimiters in a command, known as argument injection, allows an unauthorized attacker to execute code over a network...

10CVSS5.4AI score0.00565EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2026/08/20 12:00 a.m.15 views

The vulnerability of the logical decoding mechanism of the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the logical decoding mechanism in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS6AI score0.00285EPSS
SaveExploits0References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/20 12:00 a.m.19 views

Malicious code in tinymember (crates.io)

tinymember is a malicious crate published to crates.io as part of the coordinated build-time payload campaign on 2026-08-20 that trojanized arrayref, internment, and append-only-vec and published the proc-macro1 typosquat of proc-macro2. It was used as an attacker-controlled dependency carrying a...

5.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.11 views

PT-2026-80753

Name of the Vulnerable Software and Affected Versions Fleet affected versions not specified Description A SQL injection exists in the Okta conditional access integration. An attacker controlling a single enrolled host can provide a value via the host agent that is used in a database query without...

7.6CVSS6.7AI score0.00337EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.10 views

RHEL 8 : python-urwid (RHSA-2026:57638)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57638 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

9.2CVSS6.4AI score0.00421EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.15 views

PT-2026-79088

An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative privileges can bypass client-side file validation in the "Import via CSV" component due to a lack of server-side validation. This allows the upload of an arbitrary file, which can lead to Remote Code Executi...

9.4CVSS5.9AI score0.00524EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.14 views

PT-2026-79224

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on...

9.8CVSS6.4AI score0.00471EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.18 views

PT-2026-79131

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description Improper resource control in Linux Toolkit Theming allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox by using a crafted HT...

8.8CVSS5.9AI score0.00456EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.11 views

RHEL 8 : python-urwid (RHSA-2026:57637)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57637 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

9.2CVSS6.4AI score0.00421EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-76217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply...

7.1CVSS5.7AI score0.00281EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.9 views

JetBrains IntelliJ IDEA < 2026.2.1 Multiple Vulnerabilities

The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2026.2.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains IntelliJ IDEA before 2026.2.1 RCE via Markdown export tool was possible. CVE-2026-75056 - In JetBrains IntelliJ IDEA before 2026.2.1 SSR...

7.8CVSS6AI score0.00182EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.6 views

Dell Wyse Management Suite < 2605.0.2 Multiple Vulnerabilities (DSA-2026-329)

The version of Dell Wyse Management Suite installed on the remote host is prior to 2605.0.2. It is, therefore, affected by multiple vulnerabilities, including: - Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A...

7.8CVSS6AI score0.00522EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/20 12:00 a.m.6 views

UBUNTU-CVE-2026-76218

GitPython before 3.1.58 contains a remote code execution vulnerability...

7.7CVSS6.3AI score0.00492EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.36 views

PT-2026-79214

Name of the Vulnerable Software and Affected Versions Microsoft Entra ID affected versions not specified Description An issue exists in the cloud identity platform where the deserialization of untrusted data allows an unauthorized remote attacker to execute arbitrary code over the network. This...

10CVSS9.5AI score0.01555EPSS
SaveExploits0References33
Redos
Redos
added 2026/08/20 12:00 a.m.9 views

ROS-20260820-73-0008

The vulnerability in freerdp3 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.7CVSS6.4AI score0.00479EPSS
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2026/08/20 12:00 a.m.25 views

VulnCheck KEV: CVE-2026-77647

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of ?php blocks, and varexport's mishandling of certain cases such as presence of a '' character...

9.8CVSS5.8AI score0.0262EPSS
SaveIn wildExploits2References3
Spring Security Advisories
Spring Security Advisories
added 2026/08/20 12:00 a.m.9 views

cve-2026-47864 - MEDIUM - Unsafe Java deserialization in SerializingHttpMessageConverter — remote code execution

cve-2026-47864 - MEDIUM - Unsafe Java deserialization in SerializingHttpMessageConverter — remote code execution...

6.4CVSS6.4AI score0.03441EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.16 views

PT-2026-79128

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description A race condition in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to open a specially crafted HTML page. A race condition...

7.5CVSS5.9AI score0.00301EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.14 views

PT-2026-79126

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description A privilege elevation issue exists in the Import component. A remote attacker could use social engineering to trick a user into opening a crafted file, potentially allowing the executi...

8.8CVSS6AI score0.00386EPSS
SaveExploits0References14
Rows per page
Query Builder