Lucene search
+L

1661 matches found

Vulnrichment
Vulnrichment
•added 2026/04/14 4:58 p.m.•10 views

CVE-2026-32214 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability

...

5.5CVSS5.8AI score0.0035EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/14 4:58 p.m.•35 views

CVE-2026-32214 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability

...

5.5CVSS0.0035EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/14 4:57 p.m.•37 views

CVE-2026-32212 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability

...

5.5CVSS0.00373EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/14 4:57 p.m.•6 views

CVE-2026-32212 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability

...

5.5CVSS5.8AI score0.00373EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/14 4:57 p.m.•14 views

CVE-2026-32156

Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute code locally...

7.4CVSS5.9AI score0.00288EPSS
SaveExploits0References2Affected Software21
Cvelist
Cvelist
•added 2026/04/14 4:57 p.m.•50 views

CVE-2026-32075 Windows UPnP Device Host Elevation of Privilege Vulnerability

...

7CVSS0.00264EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•2 views

CVE-2026-27915: Use After Free

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•2 views

CVE-2026-27916: Use After Free

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00333EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•24 views

Microsoft Windows 安全漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There are security vulnerabilities in Microsoft Windows Universal Plug and Play UPnP Device Host. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•3 views

CVE-2026-27925: Use After Free

Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to disclose information over an adjacent network...

6.5CVSS6.2AI score0.00537EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•13 views

PT-2026-32801

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP Device Host affected versions not specified Description A use after free issue in the Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally. Use after...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•21 views

Microsoft Windows 安全漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There are security vulnerabilities in Microsoft Windows Universal Plug and Play UPnP Device Host. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•2 views

CVE-2026-32077: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS5.5AI score0.00414EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•2 views

CVE-2026-32075: Use After Free

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•2 views

CVE-2026-32156: Use After Free

Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute code locally...

7.4CVSS6.3AI score0.00288EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•2 views

CVE-2026-27920: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS5.5AI score0.00333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•2 views

CVE-2026-27919: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS5.5AI score0.00333EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/04/12 4:30 p.m.•289 views

Exploit for CVE-2020-24586

Fracture FragAttacks WiFi Penetration Framework CVE-202...

3.5CVSS7.1AI score0.05765EPSS
SaveExploits4
attackerkb
attackerkb
•added 2026/04/09 6:00 a.m.•6 views

CVE-2026-5851

A security flaw has been discovered in Totolink A7100RU 7.4cu.2313b20191024. This impacts the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument enable results in os command injection. The attack can be executed remotely. The exploi...

10CVSS7AI score0.03253EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/04/09 6:00 a.m.•461 views

CVE-2026-5851 Totolink A7100RU CGI cstecgi.cgi setUPnPCfg os command injection

A security flaw has been discovered in Totolink A7100RU 7.4cu.2313b20191024. This impacts the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument enable results in os command injection. The attack can be executed remotely. The exploi...

10CVSS0.03253EPSS
SaveExploits0References5
Rows per page
Query Builder