Lucene search
+L

306145 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-108941: Improper Control of Generation of Code

A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...

4.8CVSS4.9AI score0.00124EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-70211: Out-of-bounds Read

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00414EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-109116: Authorization Bypass Through User-Controlled Key

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqliquery of the component Order Management. Executing a manipulation of the argument ID can lead to authorization bypass. The attack can be...

7.5CVSS6.7AI score0.00302EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•9 views

PT-2026-111327

Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System affected versions not specified Description An authorization bypass exists in the Order Management component. A remote attacker can manipulate the ID argument within the mysqli query function to bypa...

7.5CVSS7.2AI score0.00302EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-83720: Use After Free

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00252EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-83636: NULL Pointer Dereference

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

6.5CVSS5.5AI score0.00391EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-70295: Out-of-bounds Read

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00414EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•5 views

PT-2026-112951

Name of the Vulnerable Software and Affected Versions Windows Key Storage Provider affected versions not specified Description An out-of-bounds read occurs in the Windows Key Storage Provider, which allows an authorized attacker to disclose sensitive information locally. Recommendations At the...

5.5CVSS5.7AI score0.00396EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

CVE-2026-108972: Improper Authentication

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function sessionstart of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authenticatio...

7.5CVSS6.9AI score0.00657EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•4 views

PT-2026-113137

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, the...

7.8CVSS5.7AI score0.00311EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•15 views

PT-2026-111135

Name of the Vulnerable Software and Affected Versions SAP S/4HANA affected versions not specified Description Insufficient input validation in the rule definition functionality, which uses a domain-specific scripting language, allows an authenticated attacker with specific business privileges to...

9.9CVSS6.2AI score0.00374EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-96313: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7CVSS5.7AI score0.0022EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-83913: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00341EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-85935: Buffer Over-read

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00396EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85374: Windows Installer Information Disclosure Vulnerability

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00387EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-112698

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

7.5CVSS5.9AI score0.00766EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-96958: Inefficient Algorithmic Complexity

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

7.5CVSS5.9AI score0.01033EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-85837: Out-of-bounds Read

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00311EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•6 views

PT-2026-113450

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than i...

6.4CVSS6.3AI score0.00191EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-96918: Incorrect Authorization

Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00278EPSS
SaveExploits0References3
Rows per page
Query Builder