Lucene search
+L

254614 matches found

Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•7 views

PT-2026-108123

It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause FreeRDP to crash, resulting in a denial of service, or execute arbitrary code...

5.9AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•19 views

PT-2026-108613

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description An integer overflow exists in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. An attacker can trigger a heap-based buffer overflow by inducing a user to open or...

7CVSS6.6AI score0.00246EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•13 views

CVE-2026-81867: Deserialization of Untrusted Data

A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration versions prior to 2026-06-28 on Google Cloud Platform allows an authenticated user with standard permissions to run arbitrary code on the shared production servers using a specially...

9.4CVSS6.2AI score0.00355EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•16 views

PT-2026-99913

WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pg file writetext,text,bool, pg file renametext,text,text, pg file unlinktext, and pg logdir ls. These functions are executable by any authenticated...

8.7CVSS6.6AI score0.00324EPSS
SaveExploits0References3
Amazon
Amazon
•added 2026/09/28 12:00 a.m.•20 views

Important: emacs

Issue Overview: GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel...

7.8CVSS6.7AI score0.00219EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•17 views

Microsoft PowerPoint presentation preparation Code Execution

The vulnerability of the Microsoft PowerPoint presentation preparation program is related to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

10CVSS7.6AI score0.00819EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•15 views

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00466EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•18 views

PDF Memory Exploitation Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00376EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•24 views

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00466EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•25 views

Microsoft Office Memory Release Code Execution

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to repeated memory release. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.4AI score0.00466EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•13 views

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.4AI score0.00466EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•32 views

HEIF Image Extension Buffer Overflow

The vulnerability of the HEIF Image Extension relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00466EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•16 views

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00466EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•23 views

PDF writing buffer overflow Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 is related to writing outside the buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00256EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/09/28 12:00 a.m.•14 views

PDF writing buffer overflow Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 is related to writing outside the buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00256EPSS
SaveExploits0References2Affected Software3
Tenable Nessus
Tenable Nessus
•added 2026/09/28 12:00 a.m.•22 views

MiracleLinux 8 : libxml2-2.9.7-21.el8_10.9 (AXSA:2026-1925:10)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1925:10 advisory. libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer...

8.5CVSS8.2AI score0.00658EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2026/09/28 12:00 a.m.•22 views

RHEL 9 : postgresql (RHSA-2026:72281)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72281 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

8.8CVSS8.1AI score0.00683EPSS
SaveExploits3References32
Tenable Nessus
Tenable Nessus
•added 2026/09/28 12:00 a.m.•17 views

RHEL 8 : postgresql:12 (RHSA-2026:72362)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72362 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

8.8CVSS8.2AI score0.00683EPSS
SaveExploits3References32
Tenable Nessus
Tenable Nessus
•added 2026/09/28 12:00 a.m.•17 views

macOS 26.x < 26.7.1 (149228)

The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.7.1. It is, therefore, affected by a vulnerability: - An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe...

8.8CVSS8.5AI score0.26166EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2026/09/28 12:00 a.m.•12 views

RHEL 8 : postgresql:12 (RHSA-2026:72363)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72363 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

8.8CVSS8.2AI score0.00683EPSS
SaveExploits3References32
Rows per page
Query Builder