Lucene search
+L

211768 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/12 2:20 a.m.146 views

CVE-2026-40129

Due to a Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform, an authenticated attacker could send specially crafted inputs to the application. If processed by the application, this input could be delivered to users subscribed to the channel and result ...

4.3CVSS6.3AI score0.00255EPSS
SaveExploits0References3
CVE
CVE
added 2026/05/12 2:20 a.m.42 views

CVE-2026-40129

The vulnerability CVE-2026-40129 affects SAP Application Server ABAP for SAP NetWeaver and ABAP Platform. A code injection flaw allows an authenticated attacker to submit specially crafted inputs that, if processed, can be delivered to channel subscribers and execute code on behalf of other users...

4.3CVSS6.3AI score0.00255EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/12 12:00 a.m.10 views

CVE-2025-65719

An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page...

6.2AI score0.00578EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.13 views

WordPress plugin GWD Connect 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.8CVSS6.3AI score0.00273EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.17 views

Adobe Media Encoder 缓冲区错误漏洞

Adobe Media Encoder is a audio and video encoding application developed by Adobe, a company based in the United States. Versions of Adobe Media Encoder such as 26.0.2, 25.6.4, and earlier versions have a buffer error vulnerability. This vulnerability stems from out-of-bounds writing, which may...

7.8CVSS6.3AI score0.00148EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.22 views

PT-2026-40429

An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file is being parsed...

8.4CVSS6AI score0.00165EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.21 views

Ashlar-Vellum多款产品 缓冲区错误漏洞

Ashlar-Vellum Xenon is a product of the Ashlar-Vellum company. Ashlar-Vellum Xenon is a CAD modeling software. Ashlar-Vellum Cobalt is a parametric computer-aided design and 3D modeling program. Ashlar-Vellum Argon is a 2D drafting and 3D modeling software. Several products from the Ashlar-Vellum...

8.4CVSS6.4AI score0.00165EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/12 12:00 a.m.24 views

CVE-2026-31218

The CVE concerns the optimate project’s neural_magic_training.py, where _load_model() deserializes a state_dict.pt with torch.load() without enabling weights_only=True. This enables deserialization of arbitrary Python objects via Pickle, allowing a remote attacker to provide a crafted state_dict....

8.8CVSS6.3AI score0.00559EPSS
SaveExploits0References2
CVE
CVE
added 2026/05/12 12:00 a.m.30 views

CVE-2026-31214

The vulnerability CVE-2026-31214 affects the torch-checkpoint-shrink.py script in the ml-engineering project, commit 0099885db36a8f06556efe1faf552518852cb1e0 (2025-20-27). The script uses torch.load() to process PyTorch checkpoint files (.pt) without enabling weights_only=True, allowing the deser...

9.8CVSS6.3AI score0.00486EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.25 views

Scramble 代码注入漏洞

Scramble is a tool developed by de:doc for automatically generating API documentation for Laravel projects. Versions of Scramble from 0.13.2 to 0.13.22 contained a code injection vulnerability. This vulnerability stemmed from the exposed documentation endpoints and the use of validation rules tha...

9.4CVSS6AI score0.0586EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.22 views

PT-2026-40326

Name of the Vulnerable Software and Affected Versions Substance3D - Painter versions prior to 12.0.3 Description An out-of-bounds write issue exists where memory is written outside the intended boundary of a buffer. This can lead to arbitrary code execution in the context of the current user...

7.8CVSS7.5AI score0.00138EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.23 views

PT-2026-40170

Name of the Vulnerable Software and Affected Versions Premiere Pro versions 26.0.2 and earlier Premiere Pro versions 25.6.4 and earlier Description A Use After Free issue exists where the software continues to use a pointer after it has been freed, which could lead to arbitrary code execution in...

7.8CVSS7.4AI score0.00177EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.24 views

PT-2026-40126

Name of the Vulnerable Software and Affected Versions mamba versions prior to 2.2.7 Description Insecure deserialization occurs when loading pre-trained models from HuggingFace Hub. The MambaLMHeadModel.from pretrained function uses torch.load to load the pytorch model.bin weight file without...

9.8CVSS6.2AI score0.00409EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/05/12 12:00 a.m.45 views

CVE-2026-31219

The loadmodel function in the neuralmagictraining.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f 2024-07-21 is vulnerable to insecure deserialization CWE-502. When a user provides a single model file path e.g., .pt or .pth via the --model command-line argumen...

0.00559EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.13 views

Adobe Connect 代码问题漏洞

Adobe Connect is a software developed by Adobe, a company based in the United States, used to create meeting environments. There is a code vulnerability in Adobe Connect, which stems from deserializing untrusted data, potentially allowing arbitrary code to execute in the current user environment...

9.6CVSS6.2AI score0.00635EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/05/12 12:00 a.m.14 views

RHEL 10 : openexr (RHSA-2026:15888)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:15888 advisory. OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents...

8.8CVSS6.2AI score0.00482EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.15 views

Adobe Media Encoder 输入验证错误漏洞

Adobe Media Encoder is a audio and video encoding application developed by Adobe, a company based in the United States. Versions of Adobe Media Encoder such as 26.0.2, 25.6.4, and earlier versions had a vulnerability related to input validation errors. This vulnerability stemmed from integer...

7.8CVSS6AI score0.0017EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.28 views

PT-2026-40168

Name of the Vulnerable Software and Affected Versions Premiere Pro versions 26.0.2 and earlier Premiere Pro versions 25.6.4 and earlier Description An out-of-bounds write issue exists where the software writes data past the end of the intended buffer, which could lead to arbitrary code execution ...

7.8CVSS7.5AI score0.00148EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.21 views

PT-2026-40367

Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending...

7.2CVSS6.4AI score0.00352EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.15 views

Adobe Substance3D Painter 缓冲区错误漏洞

Adobe Substance3D Painter is a 3D scene building software developed by Adobe, a company based in America. Versions of Adobe Substance3D Painter 12.0.2 and earlier contain a buffer overflow vulnerability, which stems from out-of-bound writes, potentially allowing arbitrary code to execute in the...

7.8CVSS6.4AI score0.00138EPSS
SaveExploits0References1
Rows per page
Query Builder