Lucene search
+L

167825 matches found

Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•16 views

PT-2026-96774

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 6.2.0 Description The CPython bytecode .pyc marshal parser in radare2 contains a flaw where marshal readers accept a 32-bit string length without validating if the value overflows the size-plus-one allocation. When...

5.5CVSS6.5AI score0.00202EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•23 views

CVE-2026-82008: Improper Input Validation

Adobe Campaign Classic ACC is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require...

9.9CVSS7AI score0.00531EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•12 views

PT-2026-96739

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Speech affected versions not specified Description Malicious input created by an attacker could cause a code injection. This issue may lead to arbitrary code execution, information disclosure, and data tampering. Recommendations At...

7.8CVSS6.1AI score0.00246EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•7 views

PT-2026-97075

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Remote authenticated attackers can execute arbitrary code due to improper validation of a specified quantity. Recommendations At the moment,...

8.8CVSS6.4AI score0.00746EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•12 views

PT-2026-96914

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could result in arbitrary code execution within the context of the current user. This flaw is...

10CVSS8.4AI score0.01248EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•10 views

PT-2026-96802

Name of the Vulnerable Software and Affected Versions SLC8000 versions prior to 9.7.0.2 SLC9000 versions prior to 9.7.0.2 EMG8500 versions prior to 9.7.0.1 EMG7500 versions prior to 9.7.0.1 SLB882 affected versions not specified SLCx-03 affected versions not specified SLCx-02 affected versions no...

9.9CVSS6.6AI score0.00848EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•13 views

PT-2026-96976

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description A Heap-based Buffer Overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially corrupting adjacent memory. This issue could result in arbitrary code...

7.8CVSS7.8AI score0.00337EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•10 views

PT-2026-96977

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An Uncontrolled Recursion issue exists that could allow arbitrary code execution in the context of the current user. This occurs when a victim opens a malicious file, requiring user interactio...

7.8CVSS7.6AI score0.00293EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•18 views

PT-2026-96895

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could lead to arbitrary code execution within the context of the current user. This flaw ca...

10CVSS6.2AI score0.01248EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•13 views

PT-2026-96985

Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description An improper input validation issue allows for arbitrary code execution within the context of the current user. This occurs when a victim visits a maliciously crafted URL or interacts wi...

9.4CVSS8.4AI score0.00921EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•14 views

PT-2026-96898

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Incorrect Authorization issue allows an attacker to execute arbitrary code in the context of the current user. This flaw does not require user interaction to be exploite...

10CVSS6.3AI score0.01166EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•14 views

PT-2026-96896

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could result in arbitrary code execution within the context of the current user. This flaw can ...

10CVSS6.2AI score0.01248EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•15 views

PT-2026-96887

Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 7.4.0 through 7.7.0 RTI Connext Professional versions 7.0.0 through 7.3.1.5 RTI Connext Professional versions 6.1.0 through 6.1.x RTI Connext Professional versions 6.0.0 through 6.0.x RTI Connext Professional...

8.3CVSS6.4AI score0.00426EPSS
SaveExploits0References3
Redos
Redos
•added 2026/09/22 12:00 a.m.•9 views

ROS-20260922-73-0020

The vulnerability in gstreamer1-plugins-bad-free is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.6CVSS7.5AI score0.0038EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•12 views

CVE-2026-73369: Improper Control of Generation of Code

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS8.9AI score0.01248EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•17 views

CVE-2026-95806: Deserialization of Untrusted Data

MISP ships with PHP's phar stream wrapper registered in both its web entry point and its console entry point. The phar stream wrapper causes PHP to treat a phar archive as a directory, which has two security consequences: - any filesystem operation on a caller-influenced path that resolves to a...

7.7CVSS6.5AI score0.00392EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•19 views

PT-2026-104840

A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the reply buffer with attacker-controlled content and length, resulting ...

7.4CVSS6.6AI score0.0057EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•18 views

CVE-2026-17636: Out-of-bounds Write

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity...

8.8CVSS6.8AI score0.00746EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•17 views

CVE-2026-75745: Incorrect Authorization

Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

10CVSS8.9AI score0.01166EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•23 views

CVE-2026-75682: Improper Neutralization of Special Elements used in an SQL Command

Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...

9.9CVSS8.8AI score0.00972EPSS
SaveExploits0References3
Rows per page
Query Builder