Lucene search
+L

375224 matches found

Vulnrichment
Vulnrichment
added 2026/07/30 2:49 a.m.15 views

CVE-2026-48449 Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed...

10CVSS6.4AI score0.00958EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/30 2:49 a.m.136 views

CVE-2026-48449

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability (CWE-863) that could lead to arbitrary code execution in the context of the current user. Exploitation does not require user interaction and is network-based with the vulnerability’s scope reported as CHANGED. Th...

10CVSS6.4AI score0.00958EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/07/30 2:49 a.m.61 views

CVE-2026-48449 Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed...

10CVSS0.00958EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/30 2:49 a.m.15 views

EUVD-2026-50955

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed...

10CVSS6.4AI score0.00958EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/30 2:00 a.m.12 views

CVE-2026-16727

Concurrent Execution using Shared Resource with Improper Synchronization “Race Condition” in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated privileges via a crafted file replacement. Refer to the ' Security Update for ASUS Armoury Crate ' section on the ASUS Securi...

7.3CVSS6.3AI score0.00087EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/07/30 1:16 a.m.10 views

DEBIAN-CVE-2026-17948

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...

7.5CVSS6.2AI score0.00195EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/30 1:16 a.m.10 views

CVE-2026-17952

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...

7.5CVSS0.00187EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/30 1:16 a.m.12 views

CVE-2026-17948

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...

7.5CVSS0.00195EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/30 12:25 a.m.56 views

CVE-2026-17952

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...

0.00187EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/30 12:25 a.m.63 views

CVE-2026-17948

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...

0.00195EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/30 12:25 a.m.59 views

CVE-2026-17920

Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...

0.00222EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/30 12:25 a.m.109 views

CVE-2026-17922

CVE-2026-17922 involves Inappropriate implementation in Google Chrome prior to 151.0.7922.72, where an issue in the Enterprise channel allowed a remote attacker to execute arbitrary code via a crafted HTML page. The vulnerability is tied to Chromium components and is described with a Chromium sec...

8.8CVSS6.3AI score0.00408EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/07/30 12:19 a.m.11 views

CVE-2026-17898

Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...

7.5CVSS6.2AI score0.00195EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/07/30 12:19 a.m.11 views

CVE-2026-17728

Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS6AI score0.00287EPSS
SaveExploits0
CNVD
CNVD
added 2026/07/30 12:00 a.m.16 views

Adobe Bridge permission licensing and access control vulnerabilities

Adobe Bridge is a digital asset management and file organization tool developed by Adobe, a company based in the United States. Adobe Bridge has vulnerabilities related to permission management and access control. These vulnerabilities stem from issues with unsanable search paths, allowing...

8.2CVSS6.1AI score0.00207EPSS
SaveExploits0
CNVD
CNVD
added 2026/07/30 12:00 a.m.11 views

Tenda TX9 sub_425964 function buffer overflow vulnerability

Tenda TX9 is a wireless router produced by the Chinese company Tenda. The version Tenda TX9 V22.03.02.20 contains a buffer overflow vulnerability. This vulnerability stems from the sub425964 function in the file/goform/SetOnlineDevName, which fails to properly validate the length of the input dat...

9.8CVSS6.4AI score0.00598EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/07/30 12:00 a.m.11 views

CVE-2026-51292

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.4AI score0.00267EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/30 12:00 a.m.21 views

PT-2026-66363

Name of the Vulnerable Software and Affected Versions PCP affected versions not specified Description A flaw in the linux sockets module exposes an unsecured internal connection. An attacker who has already achieved initial code execution can exploit this weakness to escalate privileges and execu...

8.8CVSS6.4AI score0.00454EPSS
SaveExploits0References44
Positive Technologies
Positive Technologies
added 2026/07/30 12:00 a.m.22 views

PT-2026-66617

Name of the Vulnerable Software and Affected Versions open62541 affected versions not specified Description A heap use-after-free issue exists in the TransferSubscriptions service. This occurs when the application continues to use a pointer after the memory it points to has been freed, which may...

8.1CVSS5.7AI score0.00572EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/07/30 12:00 a.m.21 views

RHEL 9 : hplip (RHSA-2026:48586)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:48586 advisory. The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project HPLIP, which provides drivers for Hewlett-Packard printer...

9.8CVSS6.6AI score0.0411EPSS
SaveExploits0References6
Rows per page
Query Builder