Lucene search
+L

1591 matches found

EUVD
EUVD
added 2026/07/14 9:4 p.m.7 views

EUVD-2026-44544

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed...

9.6CVSS6.5AI score0.0794EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/14 9:4 p.m.4 views

EUVD-2026-44545

ColdFusion is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed...

9.6CVSS6.5AI score0.00495EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/14 9:4 p.m.39 views

CVE-2026-48284 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed...

9.6CVSS0.0794EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/14 9:4 p.m.5 views

EUVD-2026-44542

ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed...

9.3CVSS6.5AI score0.00318EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/14 8:35 p.m.14 views

CVE-2026-48311

CVE-2026-48311 affects Adobe Bridge. The vulnerability is an out-of-bounds write (CWE-787) in Bridge that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The provided documents do not specify a...

7.8CVSS6.5AI score0.00148EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/07/14 8:35 p.m.13 views

CVE-2026-48342

CVE-2026-48342 affects Bridge. It is an Integer Overflow or Wraparound vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The available documents provide the vulnerable componen...

7.8CVSS6.5AI score0.0017EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/07/14 8:35 p.m.41 views

CVE-2026-48341 Bridge | Out-of-bounds Write (CWE-787)

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00149EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/14 8:21 p.m.19 views

CVE-2026-48272

CVE-2026-48272 affects Creative Cloud Desktop and involves an Uncontrolled Search Path Element (CWE-427) that could lead to arbitrary code execution in the context of the current user. Exploitation is local, does not require user interaction, and the attack surface is constrained by the patch/sco...

7.8CVSS6.5AI score0.00131EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/07/14 8:17 p.m.10 views

CVE-2026-48349

Animate is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed...

8.1CVSS0.00192EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/14 8:17 p.m.5 views

UBUNTU-CVE-2026-50649

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...

7.8CVSS7.5AI score0.00939EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/07/14 7:53 p.m.7 views

CVE-2026-48345 Animate | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

Animate is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

8.2CVSS6.5AI score0.00734EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/14 7:53 p.m.36 views

CVE-2026-48349 Animate | Incorrect Authorization (CWE-863)

Animate is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed...

8.1CVSS0.00192EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/14 7:53 p.m.9 views

CVE-2026-48349

CVE-2026-48349 (Animate) is an Incorrect Authorization vulnerability (CWE-863) that could allow arbitrary code execution in the context of the current user. Exploitation does not require user interaction, but depends on conditions beyond the attacker’s control. The CVSSv3.1 base score is 8.1 (HIG...

8.1CVSS6.5AI score0.00192EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/07/14 7:53 p.m.11 views

CVE-2026-48348

Animate is affected by an Incorrect Authorization (CWE-863) vulnerability that could lead to arbitrary code execution in the context of the current user. The exploit depends on conditions beyond the attacker’s control and requires user interaction (the victim must open a malicious file). The CVE ...

7.7CVSS6.5AI score0.00166EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/07/14 7:44 p.m.10 views

CVE-2026-48356 Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)

Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires...

9.3CVSS9.3AI score0.18875EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/14 7:44 p.m.72 views

CVE-2026-47992 Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Commerce is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnerability to execute malicious SQL...

7.2CVSS0.19924EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/14 6:17 p.m.4 views

CVE-2026-48368

Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.0018EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/14 6:17 p.m.5 views

CVE-2026-47968

Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00189EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.11 views

PT-2026-58788

Name of the Vulnerable Software and Affected Versions Adobe Bridge affected versions not specified Description An integer overflow or wraparound occurs when an application attempts to create a value that exceeds the maximum size of the integer type used to store it. This issue allows for arbitrar...

7.8CVSS6.1AI score0.0017EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.12 views

PT-2026-58798

Name of the Vulnerable Software and Affected Versions Adobe Commerce affected versions not specified Description An improper encoding or escaping of output issue allows for arbitrary code execution in the context of the current user. This flaw can be exploited without requiring any user...

10CVSS6.5AI score0.00912EPSS
SaveExploits0References3
Rows per page
Query Builder