Lucene search
+L

217672 matches found

BDU FSTEC
BDU FSTEC
added 2026/07/24 12:00 a.m.10 views

The vulnerabilities of the `ns_printrrf`, `ns_printrr`, and `fp_nquery` functions in the GNU C Library allow attackers to induce a service failure.

The vulnerability of the nsprintrrf, nsprintrr, and fpnquery functions in the GNU C Library lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

6.5CVSS6.2AI score0.00358EPSS
SaveExploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/07/24 12:00 a.m.127 views

The vulnerability of the console-based graphic editor ImageMagick, related to pointer manipulation, allows a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to the use of pointers. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

5CVSS5.9AI score0.00187EPSS
SaveExploits0References5Affected Software3
Positive Technologies
Positive Technologies
added 2026/07/24 12:00 a.m.19 views

PT-2026-64411

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...

9.3CVSS5.8AI score0.00735EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/24 12:00 a.m.32 views

PT-2026-64208

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Online affected versions not specified Description Improper authentication allows an unauthorized attacker to perform tampering over a network. Recommendations At the moment, there is no information about a newer version tha...

10CVSS5.9AI score0.00756EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/24 12:00 a.m.21 views

PT-2026-64293

A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop performed by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files accessible to the...

5.5CVSS5.9AI score0.00099EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/24 12:00 a.m.26 views

PT-2026-64201

Name of the Vulnerable Software and Affected Versions Azure API Management affected versions not specified Description Improper access control in Azure API Management APIM allows an authorized attacker to execute code over a network. Recommendations At the moment, there is no information about a...

8CVSS6.1AI score0.00529EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/24 12:00 a.m.31 views

PT-2026-64304

Name of the Vulnerable Software and Affected Versions Loytec LIP-ME201C versions prior to 8.4.19 Loytec L-INX versions prior to 8.4.19 Loytec L-GATE versions prior to 8.4.19 Loytec L-ROC versions prior to 8.4.19 Loytec L-IOB versions prior to 8.4.19 Loytec L-DALI versions prior to 8.4.19 Loytec...

8.7CVSS5.9AI score0.00322EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/24 12:00 a.m.25 views

PT-2026-64817

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description An origin validation error allows an unauthorized attacker to perform spoofing over a network. Origin validation is a security mechanism used to verify that a request...

5.4CVSS5.9AI score0.00143EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2026/07/24 12:00 a.m.13 views

The vulnerability of the ICON console-based graphic editor ImageMagick’s decoder allows a hacker to trigger a service failure.

The vulnerability of the ICON console-based image editing tool ImageMagick relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS5.7AI score0.00353EPSS
SaveExploits0References5Affected Software3
Redos
Redos
added 2026/07/24 12:00 a.m.12 views

ROS-20260724-73-0026

The vulnerability in dotnet10.0 is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.5CVSS5.9AI score0.00604EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/24 12:00 a.m.25 views

PT-2026-64413

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 8.1.2 Description The IAMF demuxer contains an issue that allows an unauthenticated attacker to cause multi-gigabyte memory allocation using a small 17-byte input file. This occurs because the mix presentation obu...

8.8CVSS5.8AI score0.00342EPSS
SaveExploits0References49
CNVD
CNVD
added 2026/07/24 12:00 a.m.15 views

Apache Syncope Server Request Forgery Vulnerability (CNVD-2026-30661)

Apache Syncope is an open-source identity management system, primarily used for managing the identity lifecycle and access control of enterprise users. There are security vulnerabilities in Apache Syncope. These vulnerabilities stem from the failure to properly validate user inputs during...

8.1CVSS5.5AI score0.00472EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/24 12:00 a.m.24 views

PT-2026-64316

Name of the Vulnerable Software and Affected Versions Azure App Service affected versions not specified Description Improper access control allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that...

10CVSS5.9AI score0.00464EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/24 12:00 a.m.28 views

PT-2026-64203

Name of the Vulnerable Software and Affected Versions Microsoft M365 Copilot affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute code over a network. Deserialization is the process of converting a data stream back into an object,...

9.9CVSS6.1AI score0.01254EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2026/07/24 12:00 a.m.10 views

The vulnerability of the console-based graphic editor ImageMagick, related to unlimited resource distribution, allows a hacker to cause a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS5.9AI score0.00346EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/07/24 12:00 a.m.10 views

The vulnerability in the net/core/flow_dissector.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/core/flowdissector.c module of the Linux operating system is related to data type mixing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS6AI score0.00437EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/07/24 12:00 a.m.9 views

The vulnerability of the console-based graphic editor ImageMagick, related to the lack of memory release after the effective lifespan, allows a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.8CVSS5.9AI score0.0026EPSS
SaveExploits0References4Affected Software3
ATTACKERKB
ATTACKERKB
added 2026/07/23 11:55 p.m.14 views

CVE-2026-54120

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...

9.9CVSS5.6AI score0.00709EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/23 10:16 p.m.14 views

DEBIAN-CVE-2026-16807

Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.8CVSS5.9AI score0.00427EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/23 9:36 p.m.58 views

CVE-2026-16806

Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

0.00387EPSS
SaveExploits0References2
Rows per page
Query Builder