Lucene search
+L

163923 matches found

Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•11 views

PT-2026-96739

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Speech affected versions not specified Description Malicious input created by an attacker could cause a code injection. This issue may lead to arbitrary code execution, information disclosure, and data tampering. Recommendations At...

7.8CVSS6.1AI score0.00246EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•12 views

PT-2026-96914

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could result in arbitrary code execution within the context of the current user. This flaw is...

10CVSS8.4AI score0.01248EPSS
SaveExploits0References3
Redos
Redos
•added 2026/09/22 12:00 a.m.•9 views

ROS-20260922-73-0030

The vulnerability in gstreamer1-plugins-good is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS8.3AI score0.00207EPSS
SaveExploits0
Redos
Redos
•added 2026/09/22 12:00 a.m.•13 views

ROS-20260922-73-0004

The vulnerability in gstreamer1-plugins-good is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.4AI score0.00211EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•13 views

PT-2026-96909

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...

9.9CVSS7AI score0.00427EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•10 views

PT-2026-96802

Name of the Vulnerable Software and Affected Versions SLC8000 versions prior to 9.7.0.2 SLC9000 versions prior to 9.7.0.2 EMG8500 versions prior to 9.7.0.1 EMG7500 versions prior to 9.7.0.1 SLB882 affected versions not specified SLCx-03 affected versions not specified SLCx-02 affected versions no...

9.9CVSS6.6AI score0.00848EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•12 views

PT-2026-97009

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler affected versions not specified Description A Stack-based Buffer Overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

7.8CVSS7.8AI score0.00174EPSS
SaveExploits0References5
Adobe
Adobe
•added 2026/09/22 12:00 a.m.•108 views

APSB26-148 : Security Updates Available for Adobe Bridge

Adobe has released a security update for Adobe Bridge. This update addresses critical and important vulnerabilities that could result in arbitrary code execution and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...

7.8CVSS7.7AI score0.00199EPSS
SaveExploits0Affected Software1
Adobe
Adobe
•added 2026/09/22 12:00 a.m.•79 views

APSB26-150 : Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves critical and important vulnerabilities that could result in arbitrary code execution, arbitrary file system read, privilege escalation, and security feature bypass. Adobe is not aware of any exploits in the wild for any ...

9.9CVSS8.2AI score0.00637EPSS
SaveExploits0Affected Software2
Adobe
Adobe
•added 2026/09/22 12:00 a.m.•27 views

APSB26-155 : Security updates available for Substance 3D Modeler

Adobe has released an update for Adobe Substance 3D Modeler. This update addresses critical vulnerabilities that could result in arbitrary code execution. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates...

7.8CVSS7.5AI score0.00174EPSS
SaveExploits0Affected Software1
Adobe
Adobe
•added 2026/09/22 12:00 a.m.•104 views

APSB26-151 : Security updates available for Adobe Experience Manager (AEM) Forms

Adobe has released a security update for Adobe Experience Manager Forms on Java Enterprise Edition JEE. This update addresses critical vulnerabilities that could result in arbitrary code execution, privilege escalation, and security feature bypass. Adobe is not aware of any exploits in the wild f...

10CVSS8.2AI score0.01239EPSS
SaveExploits0Affected Software2
AlmaLinux
AlmaLinux
•added 2026/09/22 12:00 a.m.•17 views

Important: postgresql:15 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...

8.8CVSS8AI score0.00683EPSS
SaveExploits3References34
AlmaLinux
AlmaLinux
•added 2026/09/22 12:00 a.m.•40 views

Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY...

8.8CVSS8AI score0.00683EPSS
SaveExploits3References30
AlmaLinux
AlmaLinux
•added 2026/09/22 12:00 a.m.•25 views

Important: postgresql:15 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...

8.8CVSS8AI score0.00683EPSS
SaveExploits3References34
BDU FSTEC
BDU FSTEC
•added 2026/09/22 12:00 a.m.•14 views

VPN NetworkManager-l2tp Plugin Code Execution

The vulnerability of the writeconfigoption function in the VPN NetworkManager-l2tp plugin is related to the implementation or modification of arguments. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

7.8CVSS7.5AI score0.00148EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•12 views

PT-2026-96759

Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description The multimodal generation runtime contains a flaw allowing unauthenticated arbitrary code execution. The issue occurs because the DiffusionServer within the disaggregated-diffusion orchestrato...

9.8CVSS6.5AI score0.00725EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•7 views

PT-2026-96830

Name of the Vulnerable Software and Affected Versions glibc versions 2.14 through 2.44 Description A time-of-check to time-of-use TOCTOU race condition exists in the dynamic loader ld.so. This occurs when expanding $ORIGIN in DT RPATH for setuid/setgid AT SECURE programs; the system validates the...

6.3CVSS6.4AI score0.00097EPSS
SaveExploits0References61
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•15 views

PT-2026-96982

Name of the Vulnerable Software and Affected Versions Adobe Bridge affected versions not specified Description Adobe Bridge contains a stack-based buffer overflow, which occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This flaw could...

7.8CVSS7.8AI score0.00186EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•16 views

CVE-2026-17636: Out-of-bounds Write

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity...

8.8CVSS6.8AI score0.00512EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•20 views

CVE-2026-76715: Channel Accessible by Non-Endpoint

A vulnerability in an administrative component of Analytics and Location Engine ALE is vulnerable to a man-in-the-middle MitM attack. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the affected applian...

7.1CVSS6.8AI score0.00259EPSS
SaveExploits0References3
Rows per page
Query Builder