Lucene search
+L

166430 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•15 views

NotepadPlusPlus: CVE-2026-85279: Stack-based Buffer Overflow

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in PluginsManager::loadPluginFromPath in PowerEditor/src/MISC/PluginsManager/PluginsManager.cpp because the plugin-supplied GetLexerCount result controls a loop that writes to...

8.6CVSS6.9AI score0.00224EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•15 views

CVE-2026-93088: Deserialization of Untrusted Data

SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages direct...

9.8CVSS6.5AI score0.00725EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•12 views

CVE-2026-95508: Out-of-bounds Write

A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the reply buffer with attacker-controlled content and length, resulting ...

7.4CVSS6.6AI score0.0057EPSS
SaveExploits0References2
Redos
Redos
•added 2026/09/22 12:00 a.m.•13 views

ROS-20260922-73-0004

The vulnerability in gstreamer1-plugins-good is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.4AI score0.00211EPSS
SaveExploits0
Redos
Redos
•added 2026/09/22 12:00 a.m.•9 views

ROS-20260922-73-0030

The vulnerability in gstreamer1-plugins-good is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS8.3AI score0.00207EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•12 views

PT-2026-96917

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Control of Generation of Code issue allows a low-privileged attacker to perform code injection, leading to arbitrary code execution within the context of the...

9.9CVSS8.9AI score0.00526EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•7 views

PT-2026-97075

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Remote authenticated attackers can execute arbitrary code due to improper validation of a specified quantity. Recommendations At the moment,...

8.8CVSS6.4AI score0.00746EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•9 views

PT-2026-97084

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description A buffer overflow allows a remote authenticated attacker to execute arbitrary code. Recommendations At the moment, there is no information...

8.5CVSS6.8AI score0.00441EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•13 views

PT-2026-97009

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler affected versions not specified Description A Stack-based Buffer Overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

7.8CVSS7.8AI score0.00337EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•13 views

PT-2026-96899

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Incorrect Authorization issue allows an attacker to execute arbitrary code in the context of the current user. This flaw can be exploited without requiring any user...

9.1CVSS6.4AI score0.01038EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•13 views

PT-2026-96908

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to...

9.1CVSS6.8AI score0.00991EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•14 views

PT-2026-96909

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...

9.9CVSS7AI score0.00427EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•14 views

PT-2026-96916

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An Improper Control of Generation of Code flaw allows for code injection, which could result in arbitrary code execution in the context of the current user. This issue is...

10CVSS6.2AI score0.01248EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•11 views

PT-2026-96979

Name of the Vulnerable Software and Affected Versions Adobe Bridge affected versions not specified Description An out-of-bounds write issue exists that could allow arbitrary code execution in the context of the current user. This occurs when a victim opens a malicious file, meaning user interacti...

7.8CVSS7.6AI score0.00256EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•12 views

PT-2026-96914

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could result in arbitrary code execution within the context of the current user. This flaw is...

10CVSS8.4AI score0.01248EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•15 views

PT-2026-96991

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager Forms JEE affected versions not specified Description An incorrect authorization issue allows unauthenticated attackers to execute arbitrary code in the context of the current user. This exploitation does not require a...

10CVSS8.4AI score0.01166EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•10 views

PT-2026-96802

Name of the Vulnerable Software and Affected Versions SLC8000 versions prior to 9.7.0.2 SLC9000 versions prior to 9.7.0.2 EMG8500 versions prior to 9.7.0.1 EMG7500 versions prior to 9.7.0.1 SLB882 affected versions not specified SLCx-03 affected versions not specified SLCx-02 affected versions no...

9.9CVSS6.6AI score0.00848EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•12 views

PT-2026-96976

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description A Heap-based Buffer Overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially corrupting adjacent memory. This issue could result in arbitrary code...

7.8CVSS7.8AI score0.00337EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•8 views

PT-2026-96977

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An Uncontrolled Recursion issue exists that could allow arbitrary code execution in the context of the current user. This occurs when a victim opens a malicious file, requiring user interactio...

7.8CVSS7.6AI score0.00293EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•14 views

PT-2026-96786

Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description MISP registers the PHP phar stream wrapper in its web and console entry points. This wrapper causes PHP to treat phar archives as directories, leading to two security risks: any filesystem...

7.7CVSS6.3AI score0.00392EPSS
SaveExploits0References4
Rows per page
Query Builder