Lucene search
+L

100805 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•10 views

CVE-2026-91843: Stack-based Buffer Overflow

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges...

9.8CVSS8.5AI score0.00519EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•10 views

PT-2026-94029

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Cisco ISE-PIC affected versions not specified Description A flaw in the file management function of the web-based management interface allows an authenticated remote attacker with administrative...

4.9CVSS6AI score0.01215EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•13 views

PT-2026-93866

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Description An issue in the web-based management interface allows an authenticated remote attacker with at least low-privileged administrative credentials to execute arbitrary commands on the underlyin...

9.9CVSS6.8AI score0.00955EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•6 views

PT-2026-94008

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Cisco ISE-PIC affected versions not specified Description Insufficient validation of user-supplied input in the certificate import functionality of the web-based management interface allows an...

4.9CVSS6AI score0.00382EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•6 views

PT-2026-93971

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-si...

4.3CVSS6AI score0.00357EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•8 views

CVE-2026-89028: Heap-based Buffer Overflow

MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the userspace SMB daemon that allows remote attackers to corrupt adjacent heap memory by supplying a crafted uniPwdLen value in the SMB1 SessionSetupAndX handler. An attacker can send a malformed SMB1 request with a...

8.2CVSS6.3AI score0.00582EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•8 views

CVE-2026-20309: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface...

6.1CVSS6.3AI score0.00193EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•10 views

PT-2026-93995

Name of the Vulnerable Software and Affected Versions Cisco ThousandEyes Virtual Appliance affected versions not specified Description An issue in the web-based management interface allows an authenticated remote attacker to perform operating system command injection. This occurs because the...

4.7CVSS6.2AI score0.00345EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•10 views

PT-2026-93851

Name of the Vulnerable Software and Affected Versions Dell Update Package Framework versions prior to 26.07.03 Description A Stack-based Buffer Overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

8.8CVSS6AI score0.00406EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•6 views

CVE-2026-91106: Heap-based Buffer Overflow

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS6AI score0.01035EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•8 views

PT-2026-93972

A vulnerability in the web-based management interface of Cisco Identify Services Engine ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permissions. An...

4.3CVSS6AI score0.00357EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•9 views

CVE-2026-92787: Use of Hard-coded Credentials

Feast through 0.66.0 fails to verify JWT token signatures before establishing user identity, allowing attackers to bypass all role-based access control by presenting an unverified token with a hardcoded claim value. Attackers can obtain trusted internal identity and gain unchecked read and write...

9.8CVSS5.8AI score0.007EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•13 views

PT-2026-93951

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Description A flaw in the web-based management interface allows an authenticated remote attacker to obtain sensitive information from network users belonging to security groups other than the one...

4.9CVSS5.8AI score0.00371EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•11 views

CVE-2026-20072: Incorrect Authorization

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from network users that are outside the security group that the attacker is assigned to. This vulnerability exists because certain files lack proper...

4.9CVSS6AI score0.00371EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•9 views

PT-2026-94009

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could...

6.5CVSS6AI score0.00558EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-91086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmxprocess of the file filters/reframempgvid.c o...

7.5CVSS6.5AI score0.00553EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2026/09/16 12:00 a.m.•17 views

A GAN-Based Framework for Robust DDoS Attack Detection

The availability and consistency of online services remain vulnerable due to Distributed Denial of Service DDoS attacks. These attacks are evolving by adopting more complex strategies to evade traditional network security systems. Despite the effectiveness of machine learning models in detecting...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•8 views

PT-2026-93809

Name of the Vulnerable Software and Affected Versions @fastify/proxy-addr versions 3.0.0 through 5.1.0 Description This plugin, used to determine a request's client address behind trusted reverse proxies, incorrectly handles trust subnets written in IPv4-mapped IPv6 notation when an IPv4-sized...

9.1CVSS5.9AI score0.00332EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•11 views

PT-2026-93856

Name of the Vulnerable Software and Affected Versions GPAC version 26.07.0 Description A heap-based buffer overflow exists in the WebSocket Handler component within the rmt client handle ws frame function of the src/utils/rmt ws.c file. This issue can be triggered remotely by manipulating the...

7.5CVSS7.4AI score0.0069EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•6 views

PT-2026-93373

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions prior to 1.26.1 Description A heap-based buffer overflow exists in the DNSSEC validator of the Unbound DNS resolver. The issue occurs during the preparation of a DNSKEY digest within the ds create dnskey digest...

10CVSS6.9AI score0.00962EPSS
SaveExploits1References90
Rows per page
Query Builder