Lucene search
+L

100911 matches found

Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•10 views

PT-2026-94029

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Cisco ISE-PIC affected versions not specified Description A flaw in the file management function of the web-based management interface allows an authenticated remote attacker with administrative...

4.9CVSS6AI score0.01215EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•13 views

PT-2026-93866

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Description An issue in the web-based management interface allows an authenticated remote attacker with at least low-privileged administrative credentials to execute arbitrary commands on the underlyin...

9.9CVSS6.8AI score0.00955EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•6 views

PT-2026-94008

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Cisco ISE-PIC affected versions not specified Description Insufficient validation of user-supplied input in the certificate import functionality of the web-based management interface allows an...

4.9CVSS6AI score0.00382EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•6 views

PT-2026-93971

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-si...

4.3CVSS6AI score0.00357EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•8 views

CVE-2026-89028: Heap-based Buffer Overflow

MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the userspace SMB daemon that allows remote attackers to corrupt adjacent heap memory by supplying a crafted uniPwdLen value in the SMB1 SessionSetupAndX handler. An attacker can send a malformed SMB1 request with a...

8.2CVSS6.3AI score0.00582EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•10 views

PT-2026-93995

Name of the Vulnerable Software and Affected Versions Cisco ThousandEyes Virtual Appliance affected versions not specified Description An issue in the web-based management interface allows an authenticated remote attacker to perform operating system command injection. This occurs because the...

4.7CVSS6.2AI score0.00345EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•6 views

CVE-2026-91106: Heap-based Buffer Overflow

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS6AI score0.01035EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•8 views

PT-2026-93972

A vulnerability in the web-based management interface of Cisco Identify Services Engine ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permissions. An...

4.3CVSS6AI score0.00357EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•9 views

CVE-2026-92787: Use of Hard-coded Credentials

Feast through 0.66.0 fails to verify JWT token signatures before establishing user identity, allowing attackers to bypass all role-based access control by presenting an unverified token with a hardcoded claim value. Attackers can obtain trusted internal identity and gain unchecked read and write...

9.8CVSS5.8AI score0.007EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•13 views

PT-2026-93951

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Description A flaw in the web-based management interface allows an authenticated remote attacker to obtain sensitive information from network users belonging to security groups other than the one...

4.9CVSS5.8AI score0.00371EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•11 views

CVE-2026-20072: Incorrect Authorization

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from network users that are outside the security group that the attacker is assigned to. This vulnerability exists because certain files lack proper...

4.9CVSS6AI score0.00371EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•9 views

PT-2026-94009

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could...

6.5CVSS6AI score0.00558EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2026/09/16 12:00 a.m.•17 views

A GAN-Based Framework for Robust DDoS Attack Detection

The availability and consistency of online services remain vulnerable due to Distributed Denial of Service DDoS attacks. These attacks are evolving by adopting more complex strategies to evade traditional network security systems. Despite the effectiveness of machine learning models in detecting...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•8 views

PT-2026-93809

Name of the Vulnerable Software and Affected Versions @fastify/proxy-addr versions 3.0.0 through 5.1.0 Description This plugin, used to determine a request's client address behind trusted reverse proxies, incorrectly handles trust subnets written in IPv4-mapped IPv6 notation when an IPv4-sized...

9.1CVSS5.9AI score0.00332EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•11 views

PT-2026-93856

Name of the Vulnerable Software and Affected Versions GPAC version 26.07.0 Description A heap-based buffer overflow exists in the WebSocket Handler component within the rmt client handle ws frame function of the src/utils/rmt ws.c file. This issue can be triggered remotely by manipulating the...

7.5CVSS7.4AI score0.0069EPSS
SaveExploits0References15
osv-alsa
osv-alsa
•added 2026/09/16 12:00 a.m.•9 views

ALSA-2026:67872 Important: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fixes: corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly CVE-2026-81665 For more details about the security issues, including...

7.5CVSS6.2AI score0.00349EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•6 views

PT-2026-93373

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions prior to 1.26.1 Description A heap-based buffer overflow exists in the DNSSEC validator of the Unbound DNS resolver. The issue occurs during the preparation of a DNSKEY digest within the ds create dnskey digest...

10CVSS6.9AI score0.00962EPSS
SaveExploits1References90
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•7 views

PT-2026-94000

Name of the Vulnerable Software and Affected Versions Cisco Secure FMC Software affected versions not specified Description An issue exists in the remote diagnostics debugger of Cisco Secure FMC Software where an error occurs when verifying the privilege level of a user invoking remote diagnostic...

8.5CVSS6AI score0.00442EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•5 views

CVE-2026-91098: Heap-based Buffer Overflow

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

9.8CVSS6AI score0.01005EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•11 views

PT-2026-93851

Name of the Vulnerable Software and Affected Versions Dell Update Package Framework versions prior to 26.07.03 Description A Stack-based Buffer Overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

8.8CVSS6AI score0.00406EPSS
SaveExploits0References5
Rows per page
Query Builder