Lucene search
+L

976195 matches found

CVE
CVE
added 3 days ago52 views

CVE-2026-63514

Summary: CVE-2026-63514 involves deserialization of untrusted data in Microsoft Office SharePoint, enabling an authorized attacker to execute code remotely over a network. Affected component: SharePoint Server (deserialization path in untrusted data handling). Impact: Remote code execution with H...

8.8CVSS5.4AI score0.01257EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 3 days ago6 views

EUVD-2026-56290

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network...

8.8CVSS5.4AI score0.00625EPSS
SaveExploits0References1
CVE
CVE
added 3 days ago56 views

CVE-2026-65768

CVE-2026-65768 : Microsoft Teams for Android contains a path traversal vulnerability due to improper limitation of a pathname to a restricted directory, enabling remote code execution over a network. Severity CVSS v3.1 base score 8.8 (HIGH). Affected product: Teams for Android; impact is remote c...

8.8CVSS5.4AI score0.00625EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 3 days ago5 views

CVE-2026-65768 Microsoft Teams Remote Code Execution Vulnerability

...

8.8CVSS5.2AI score0.00625EPSS
SaveExploits0References1
Cvelist
Cvelist
added 3 days ago28 views

CVE-2026-65768 Microsoft Teams Remote Code Execution Vulnerability

...

8.8CVSS0.00625EPSS
SaveExploits0References1
Microsoft Security Update
Microsoft Security Update
added 3 days ago55 views

2026-08 .NET 10.0.11 Security Update for x64 Client (KB5122106)

2026-08 .NET 10.0.11 Security Update for x64 Client KB5122106...

5.2AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 3 days ago27 views

2026-08 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 (KB5121649)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

5.3AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 3 days ago9 views

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability (CVE-2026-14976, CVE-2026-15280)

Summary IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability with the collectiveController-1.0 enabled. Vulnerability Details CVEID:CVE-2026-15280 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ...

9.8CVSS6.3AI score0.00335EPSS
SaveExploits0Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 3 days ago7 views

Malicious code in bs58-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d59b2d561269e6779eed82e12abe726403e9a2419936c01a4deaea9c3e70b2c Package bs58-12 presents itself as the popular bs58 base58 library README copied from bs58, advertising npm i --save bs58 but its own code is a thin...

5.5AI score
SaveExploits0References2
OSV
OSV
added 3 days ago4 views

MAL-2026-13758 Malicious code in bs58-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af29bcf6fea2d386f8beb757fa38bac5f1cc6dbae984795f5fd1f4356afd83f7 Package bs58-11 is published under a name that resembles the popular bs58 module. Its README self-identifies as bs58 and instructs npm i --save bs58,...

5.5AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 3 days ago9 views

Malicious code in base65-12x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b553d84d7f4dc5347840ddb97f16738eed2e52ac9757b48d2cb31ba1af7122 The package name base65-12x typosquats the popular base-x base-encoding library and reuses base-x's repository as its homepage. Both the CJS entry...

5.5AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
added 3 days ago5 views

openjdk-orb: unauthed class loading via IIOP in EAP

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run...

8.1CVSS5.6AI score0.00439EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 3 days ago5 views

bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA core. A covert timing channel vulnerability, caused by non-constant time comparisons, risks the leakage of private keys in the FrodoKEM implementation. An unauthenticated, remote attacker can potentially exploit this timing discrepancy ...

9.9CVSS7.2AI score0.00899EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 3 days ago4 views

netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

A flaw was found in Netty. This vulnerability allows a remote attacker to perform request smuggling attacks due to incorrect parsing of malformed Transfer-Encoding headers. By exploiting this flaw, an attacker can bypass security controls and potentially access sensitive information or manipulate...

7.5CVSS6.8AI score0.00248EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 3 days ago4 views

netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads

A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by sending specially crafted Redis payloads across multiple connections without proper termination. This can exhaust the server's direct memory pool, leading to a Denial of Service DoS condition where legitima...

7.5CVSS5.4AI score0.00461EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 3 days ago8 views

netty-codec-redis: Netty: Denial of Service via malicious Redis array header

A flaw was found in Netty, a network application framework. The RedisArrayAggregator component pre-allocates memory based on the declared element count in a Redis array header. A remote attacker can exploit this by sending a small, malicious Redis array header that claims a huge initial capacity,...

7.5CVSS7.2AI score0.00461EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 3 days ago6 views

netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

A flaw was found in Netty. Netty's DNS Domain Name System codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the...

9.1CVSS6.8AI score0.00969EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 3 days ago5 views

netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager X509TrustManager, it fails to perform...

7.5CVSS7.2AI score0.00456EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 3 days ago7 views

CVE-2026-48440

ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction...

8.1CVSS6.1AI score0.00618EPSS
SaveExploits0References2
CVE
CVE
added 3 days ago20 views

CVE-2026-73081

CVE-2026-73081 affects Activepieces prior to 0.80.0. The worker’s code-compilation pipeline creates the on-disk path for a Code step from the step name and passes it to a shell-invoked build command. A step name containing shell metacharacters can break out of the intended build invocation, allow...

8.7CVSS5.7AI score0.00297EPSS
SaveExploits0References2
Rows per page
Query Builder