Lucene search
+L

23766 matches found

Vulnrichment
Vulnrichment
•added 2026/05/26 5:09 p.m.•18 views

CVE-2026-7454 WRL File Parsing Memory Corruption in Autodesk 3ds Max

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

7.8CVSS6.6AI score0.00193EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/26 5:08 p.m.•60 views

CVE-2026-7453 WRL File Parsing Memory Exhaustion in Autodesk 3ds Max

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can cause a Stack Exhaustion vulnerability, leading to a denial-of-service condition...

5.5CVSS0.00162EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/26 5:06 p.m.•44 views

EUVD-2026-31912

Eppendorf BioFlo 320 is vulnerable to due to VNC server using a hard-coded password. If a remote attacker knows the network address of any BioFlo 320 model with remote access enabled, they can gain full control of the user interface by using this password. Once connected, the attacker would have...

9.8CVSS5.9AI score0.0074EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/05/26 5:06 p.m.•16 views

CVE-2026-7251

Eppendorf BioFlo 320 is vulnerable due to VNC server using a hard-coded password. If a remote attacker knows the network address of any BioFlo 320 model with remote access enabled, they can gain full control of the user interface by using this password. Once connected, the attacker would have ful...

9.8CVSS5.9AI score0.0074EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/05/26 5:06 p.m.•62 views

CVE-2026-7251 Eppendorf BioFlo 320 Use of hard-coded password

Eppendorf BioFlo 320 is vulnerable due to VNC server using a hard-coded password. If a remote attacker knows the network address of any BioFlo 320 model with remote access enabled, they can gain full control of the user interface by using this password. Once connected, the attacker would have ful...

9.8CVSS0.0074EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/26 4:31 p.m.•43 views

CVE-2026-43981

CVE-2026-43981 affects Algernon, a small self-contained Go web server. In versions prior to 1.17.6, a race condition exists in engine/luahandler.go: the sync.RWMutex protecting LoadCommonFunctions is released before L.Push() and L.PCall() execute. Since gopher-lua’s LState is not goroutine-safe, ...

8.2CVSS5.9AI score0.00282EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/05/26 12:56 p.m.•24 views

CVE-2026-48132 VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP

The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used 4500/UDP. As a result, a specially crafted or malformed packet can cause the VPN processing service to terminate unexpectedly, leading to denial of service temporary interruption of VPN...

8.1CVSS5.8AI score0.00404EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/26 12:56 p.m.•148 views

CVE-2026-48132

The CVE-2026-48132 entry describes a vulnerability in Security Gateway where length values in certain IKE packets over NAT-T (UDP/4500) are not validated correctly. This can cause the VPN processing service to terminate unexpectedly, resulting in a denial-of-service (temporary interruption of VPN...

8.1CVSS5.8AI score0.00404EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/26 12:56 p.m.•19 views

CVE-2026-48132

The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used 4500/UDP. As a result, a specially crafted or malformed packet can cause the VPN processing service to terminate unexpectedly, leading to denial of service temporary interruption of VPN...

8.1CVSS5.8AI score0.00404EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/26 12:56 p.m.•69 views

CVE-2026-48131 VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero

The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to terminate unexpectedly, resulting in denial of service temporary disruption of VPN-related functionality...

8.1CVSS0.00404EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/26 12:35 p.m.•14 views

SUSE-SU-2026:2073-1 Security update for samba

This update for samba fixes the following issues - CVE-2026-2340: vfsworm does not block directory modification bsc1261158. - CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server bsc1261160. - CVE-2026-4408: Remote Code Execution in SAMR bsc1261163. - CVE-2026-4480: Unauthenticated...

9.8CVSS7.2AI score0.1393EPSS
SaveExploits10References9
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•22 views

NVIDIA Display Driver 输入验证错误漏洞

NVIDIA Display Driver is a graphics driver developed by NVIDIA Corporation. NVIDIA Display Driver has a vulnerability related to input validation errors. This vulnerability arises from improper input validation by users within the User Virtual Machine UVM, which may lead to denial-of-service...

7.1CVSS5.8AI score0.00162EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/26 12:00 a.m.•31 views

PT-2026-43343

NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for stack memory. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code executi...

7CVSS5.9AI score0.00167EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•28 views

Check Point Security Gateway 安全漏洞

Check Point Security Gateway is a series of network security gateway devices developed by Check Point Corporation in Israel. There is a security vulnerability in Check Point Security Gateway, which stems from incorrect validation of length values in specific IKE packets during NAT-T operations...

8.1CVSS5.8AI score0.00404EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/26 12:00 a.m.•27 views

PT-2026-43338

Name of the Vulnerable Software and Affected Versions NVIDIA Display Driver for Linux affected versions not specified Description A flaw exists in the Unified Video Memory UVM component due to improper input validation. This issue allows a user to trigger a condition that may result in a denial o...

7.1CVSS6.7AI score0.00162EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2026/05/26 12:00 a.m.•35 views

PT-2026-43235

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The VPN service may mishandle an unexpected IKE fragment value received on the IKE port '500/UDP' during the early stage of a connection attempt. This can cause...

8.1CVSS5.7AI score0.00404EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•25 views

NVIDIA vGPU Software 资源管理错误漏洞

NVIDIA vGPU Software is a management software developed by NVIDIA Corporation in the United States, designed to provide GPU capabilities for virtual machines. This software enables multiple virtual machines to access the host’s GPU, thereby providing graphics performance and application...

7CVSS5.9AI score0.00167EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/05/26 12:00 a.m.•38 views

PT-2026-43344

NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound access. A successful exploit of this vulnerability might lead to data tampering, denial of service, or information disclosure...

5.8CVSS5.8AI score0.00143EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/26 12:00 a.m.•7 views

CVE-2026-24201: Out-of-bounds Write

NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound access. A successful exploit of this vulnerability might lead to data tampering, denial of service, or information disclosure...

5.8CVSS5.8AI score0.00143EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/26 12:00 a.m.•8 views

CVE-2026-24200: Use After Free

NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for stack memory. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code executi...

7CVSS7.3AI score0.00167EPSS
SaveExploits0References2
Rows per page
Query Builder