Lucene search
+L

16311 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•7 views

CVE-2026-89174: Improper Restriction of Excessive Authentication Attempts

Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...

8.7CVSS5.8AI score0.00514EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•21 views

PT-2026-90595

Name of the Vulnerable Software and Affected Versions Smart Marketing SMS and Newsletters Forms versions prior to 5.1.25 Description This issue is a generic SQL Injection that allows authenticated attackers with subscriber-level access and above to append additional SQL queries to existing ones,...

6.5CVSS5.8AI score0.00451EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•27 views

PT-2026-89797

Name of the Vulnerable Software and Affected Versions Smart Video Intercom System affected versions not specified Description Kingdom Communication Associated developed a system that lacks brute-force protection. This allows unauthenticated remote attackers to gain access to valid accounts by...

8.7CVSS5.8AI score0.00514EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•7 views

CVE-2026-89173: Observable Response Discrepancy

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...

6.9CVSS5.8AI score0.00436EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-49836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path...

4.6CVSS6AI score0.00192EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/10 10:16 p.m.•17 views

CVE-2026-49836

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...

4.6CVSS0.00192EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/09/10 10:16 p.m.•16 views

CVE-2026-49836

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...

4.6CVSS6AI score0.00192EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/10 9:47 p.m.•47 views

CVE-2026-49836 psd-tools: arbitrary file write via smart-object filename

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...

4.6CVSS0.00192EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/10 9:47 p.m.•54 views

CVE-2026-49836

psd-tools (Python library for Adobe Photoshop PSD files) is vulnerable to arbitrary file write and arbitrary file read via unsanitized smart-object paths. In all releases through v1.17.0 , SmartObject.save() uses the embedded filename from the PSD verbatim—no basename, no .. filtering, no absolut...

4.6CVSS6AI score0.00192EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/09/10 11:47 a.m.•15 views

Security update for opensc

This update for opensc fixes the following issue: CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964. Patch Instructions: To install this SUSE update use the SU...

5.7CVSS6.4AI score0.00254EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/10 11:47 a.m.•7 views

SUSE-SU-2026:4123-1 Security update for opensc

This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...

6.8CVSS6.4AI score0.00254EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
•added 2026/09/10 11:46 a.m.•16 views

Security update for opensc

This update for opensc fixes the following issue: CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964. Patch Instructions: To install this SUSE update use the SU...

5.7CVSS6.4AI score0.00254EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/10 11:46 a.m.•9 views

SUSE-SU-2026:4122-1 Security update for opensc

This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...

6.8CVSS6.4AI score0.00254EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/09/10 3:38 a.m.•30 views

evmpatch-env

evmpatch-env An execution-verified RL environment for repai...

5.8AI score
SaveExploits0
OSV
OSV
•added 2026/09/09 2:07 p.m.•13 views

OPENSUSE-SU-2026:21820-1 Security update for opensc

This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...

6.8CVSS6.4AI score0.00254EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/09 1:45 p.m.•8 views

SUSE-SU-2026:23717-1 Security update for opensc

This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...

6.8CVSS6.4AI score0.00254EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
•added 2026/09/09 1:25 p.m.•14 views

Security update for opensc

This update for opensc fixes the following issue: CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964. Patch Instructions: To install this SUSE update use the SU...

5.7CVSS6.4AI score0.00254EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/09 1:25 p.m.•13 views

SUSE-SU-2026:4108-1 Security update for opensc

This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...

6.8CVSS6.4AI score0.00254EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/08 6:19 p.m.•23 views

CVE-2026-69785

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00457EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 5:16 p.m.•15 views

EUVD-2026-73615

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00457EPSS
SaveExploits0References1
Rows per page
Query Builder