Lucene search
+L

247613 matches found

Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•8 views

PT-2026-99867

Name of the Vulnerable Software and Affected Versions mH-DEVELOPER versions prior to 3.0.30 Description The smart home module uses an end-of-life and unsupported Debian 8 operating system and Node.js runtime v17.0.1 in its production firmware. This reliance on obsolete components exposes the devi...

6.9CVSS6.4AI score0.00368EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
•added 2026/09/28 12:00 a.m.•12 views

Apple Security Advisory 09-28-2026-1

Apple Security Advisory 09-28-2026-1 - iOS 26.7.1 and iPadOS 26.7.1 addresses out of bounds write and arbitrary code execution vulnerabilities...

6.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•10 views

PT-2026-99913

WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pg file writetext,text,bool, pg file renametext,text,text, pg file unlinktext, and pg logdir ls. These functions are executable by any authenticated...

8.7CVSS6.5AI score0.00324EPSS
SaveExploits0References3
Amazon
Amazon
•added 2026/09/28 12:00 a.m.•16 views

Important: gvfs

Issue Overview: A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buff...

8.8CVSS6.9AI score0.00359EPSS
SaveExploits0
Redos
Redos
•added 2026/09/28 12:00 a.m.•9 views

ROS-20260928-73-0071

The vulnerability of the procreaddirde function in the Linux operating system is related to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

7.8CVSS7.4AI score0.00455EPSS
SaveExploits3
Apple
Apple
•added 2026/09/28 12:00 a.m.•77 views

About the security content of macOS Tahoe 26.7.1

About the security content of macOS Tahoe 26.7.1 This document describes the security content of macOS Tahoe 26.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

8.8CVSS8.4AI score0.01242EPSS
SaveExploits1References1Affected Software1
Apple
Apple
•added 2026/09/28 12:00 a.m.•25 views

About the security content of iOS 26.7.1 and iPadOS 26.7.1

About the security content of iOS 26.7.1 and iPadOS 26.7.1 This document describes the security content of iOS 26.7.1 and iPadOS 26.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

8.8CVSS8.4AI score0.01242EPSS
SaveExploits1References1Affected Software2
Apple
Apple
•added 2026/09/28 12:00 a.m.•72 views

About the security content of macOS Sequoia 15.8.1

About the security content of macOS Sequoia 15.8.1 This document describes the security content of macOS Sequoia 15.8.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

8.8CVSS8.4AI score0.01242EPSS
SaveExploits1References1Affected Software1
Redos
Redos
•added 2026/09/28 12:00 a.m.•13 views

ROS-20260928-73-0104

The vulnerability of the dounregisterframebuffer function in the Linux operating system’s kernel relates to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure or execute arbitrary code...

7.8CVSS7.6AI score0.0014EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•5 views

PT-2026-102300

Name of the Vulnerable Software and Affected Versions Requests affected versions not specified Description Requests fails to correctly handle the generation of random temporary file paths, which could allow an attacker to execute arbitrary code. Recommendations At the moment, there is no...

5.5CVSS6.5AI score0.00185EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/28 12:00 a.m.•9 views

RHEL 8 : postgresql:12 (RHSA-2026:72363)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72363 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

8.8CVSS7.9AI score0.00683EPSS
SaveExploits3References32
Tenable Nessus
Tenable Nessus
•added 2026/09/28 12:00 a.m.•16 views

RHEL 9 : postgresql (RHSA-2026:72281)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72281 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

8.8CVSS7.9AI score0.00683EPSS
SaveExploits3References32
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•15 views

The vulnerability of the HEIF Image Extension relates to buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the HEIF Image Extension relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.4AI score0.00466EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•15 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00466EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•17 views

The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server programs relates to buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00466EPSS
SaveExploits0References2Affected Software8
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•9 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in buffer overflows in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00466EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•18 views

The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server programs relates to buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server packages is related to reading data beyond the allowed range in memory. Exploitation of this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.1AI score0.00466EPSS
SaveExploits0References2Affected Software8
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•13 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00466EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•20 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7CVSS7.5AI score0.00369EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•12 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00466EPSS
SaveExploits0References2Affected Software7
Rows per page
Query Builder