Lucene search
+L

248761 matches found

Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•6 views

PT-2026-102300

Name of the Vulnerable Software and Affected Versions Requests affected versions not specified Description Requests fails to correctly handle the generation of random temporary file paths, which could allow an attacker to execute arbitrary code. Recommendations At the moment, there is no...

5.5CVSS6.5AI score0.00185EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•11 views

CVE-2026-87114: Inclusion of Functionality from Untrusted Control Sphere

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...

7.1CVSS6.6AI score0.00202EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•13 views

PT-2026-102337

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7.1 iPadOS versions prior to 26.7.1 macOS Sequoia versions prior to 15.8.1 macOS Tahoe versions prior to 26.7.1 Description An out-of-bounds write issue exists in the Apple CoreGraphics framework, which is used for 2D...

10CVSS8.6AI score0.01242EPSS
SaveExploits1References218
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•9 views

PT-2026-99851

Name of the Vulnerable Software and Affected Versions Google Cloud Application Integration versions prior to 2026-06-28 Description A Deserialization of Untrusted Data issue in the JavaScript Task on Google Cloud Platform allows an authenticated user with standard permissions to execute arbitrary...

9.4CVSS6.6AI score0.00355EPSS
SaveExploits0References4
Redos
Redos
•added 2026/09/28 12:00 a.m.•16 views

ROS-20260928-73-0078

The vulnerability of the tipcmonreinitself function in the Linux operating system’s kernel relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

7.8CVSS7.5AI score0.00146EPSS
SaveExploits0
Redos
Redos
•added 2026/09/28 12:00 a.m.•16 views

ROS-20260928-73-0033

The vulnerability of the ext4xattr inodeupdateref function in the Linux operating system is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00178EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/09/28 12:00 a.m.•10 views

RHEL 8 : postgresql:12 (RHSA-2026:72363)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72363 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

8.8CVSS8.2AI score0.00683EPSS
SaveExploits3References32
Tenable Nessus
Tenable Nessus
•added 2026/09/28 12:00 a.m.•14 views

MiracleLinux 8 : libxml2-2.9.7-21.el8_10.9 (AXSA:2026-1925:10)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1925:10 advisory. libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer...

8.5CVSS6.8AI score0.00447EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2026/09/28 12:00 a.m.•12 views

RHEL 10 : postgresql16 (RHSA-2026:72282)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72282 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that...

8.8CVSS8.1AI score0.00683EPSS
SaveExploits3References34
Tenable Nessus
Tenable Nessus
•added 2026/09/28 12:00 a.m.•14 views

RHEL 8 : postgresql:12 (RHSA-2026:72362)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72362 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

8.8CVSS8.2AI score0.00683EPSS
SaveExploits3References32
Tenable Nessus
Tenable Nessus
•added 2026/09/28 12:00 a.m.•20 views

RHEL 9 : postgresql (RHSA-2026:72281)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72281 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

8.8CVSS8.1AI score0.00683EPSS
SaveExploits3References32
Tenable Nessus
Tenable Nessus
•added 2026/09/28 12:00 a.m.•15 views

MiracleLinux 9 : postgresql:18 (AXSA:2026-1927:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1927:01 advisory. postgresql: PostgreSQL: SQL injection in pgcreatesubscriber allows arbitrary SQL execution as superuser CVE-2026-6476 postgresql: PostgreSQL:...

8.8CVSS8.3AI score0.00683EPSS
SaveExploits3References21
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•9 views

PDF Memory Exploitation Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00376EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•36 views

NetScaler ADC Gateway Code Execution

The vulnerability of the NetScaler ADC application delivery controller previously Citrix ADC and the NetScaler Gateway virtual environment access control system previously Citrix Gateway is related to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a...

9CVSS8.1AI score0.01301EPSS
SaveExploits4References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•16 views

PDF writing buffer overflow Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 is related to writing outside the buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00256EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•15 views

PDF Memory Exploitation Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00376EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•14 views

Windows Message Queue Code Execution

The vulnerability of Message Queuing in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS7.6AI score0.00707EPSS
SaveExploits0References2Affected Software10
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•9 views

PDF writing buffer overflow Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 is related to writing outside the buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00256EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•14 views

PDF Memory Exploitation Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00376EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•15 views

PDF viewing and editing programs Code Execution

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 are related to data type mixing errors. Exploiting these vulnerabilities can allow attackers to execute arbitrary code...

7.8CVSS8.2AI score0.00293EPSS
SaveExploits0References2Affected Software3
Rows per page
Query Builder