Lucene search
+L

372970 matches found

Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•8 views

PT-2026-112702

Name of the Vulnerable Software and Affected Versions Windows Telephony Server affected versions not specified Description A use after free issue in Windows Telephony Server allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

7.8CVSS6.2AI score0.00318EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft SQL Server: CVE-2026-94512: SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

8.8CVSS6.6AI score0.0049EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-96926: Role: DNS Server Tampering Vulnerability

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

5.5CVSS5.7AI score0.00281EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft SQL Server: CVE-2026-85919: Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00183EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•5 views

PT-2026-112881

Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

7.5CVSS5.8AI score0.00378EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•6 views

PT-2026-113263

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00734EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•10 views

PT-2026-112399

Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.00765EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•6 views

PT-2026-113268

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00734EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-83869: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in DNS Server allows an unauthorized attacker to execute code over a network...

9.8CVSS6.3AI score0.00634EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-83869: Windows Domain Name Service Remote Code Execution Vulnerability

Integer underflow wrap or wraparound in DNS Server allows an unauthorized attacker to execute code over a network...

9.8CVSS6.3AI score0.00634EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•12 views

PT-2026-112634

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the DNS Server, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Recommendatio...

9.8CVSS6.8AI score0.00634EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-103965: Improper Control of Generation of Code

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return...

5.4CVSS5.7AI score0.0015EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

Microsoft Windows: CVE-2026-88114: Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

8.8CVSS6.1AI score0.00545EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Exchange: CVE-2026-77910: Microsoft Exchange Server Elevation of Privilege Vulnerability

Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.00765EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-112465

Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description An out-of-bounds read occurs in the Network Policy Server NPS, which allows an unauthorized attacker to cause a denial of service over a network. An out-of-bounds read is a...

7.5CVSS5.8AI score0.012EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•5 views

PT-2026-113266

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00734EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•9 views

PT-2026-111415

Name of the Vulnerable Software and Affected Versions conductor-oss conductor version 3.22.0 Description An issue exists in the MCP Service component within the MCPService.listTools function. A remote attacker can perform server-side request forgery SSRF—a technique that allows an attacker to...

6.5CVSS6.6AI score0.00256EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-88123: Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network...

6.5CVSS5.8AI score0.0109EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•6 views

PT-2026-113267

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00734EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•8 views

PT-2026-113439

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when a program writes...

6.6CVSS7AI score0.00423EPSS
SaveExploits0References6
Rows per page
Query Builder