Lucene search
+L

11263 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•11 views

CVE-2026-72943: Use After Free

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

7.5CVSS7.9AI score0.00663EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•7 views

CVE-2026-86516: Improper Privilege Management

A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role.yaml of the component AWS GitHub OIDC Deployment Helper Script. Performing a manipulation results in improper privilege...

5.8CVSS5AI score0.00396EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•8 views

PT-2026-114494

Уязвимость службы развертывания Windows Deployment Services операционных систем Windows связана с использованием памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

7.5CVSS7.3AI score0.00663EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•7 views

PT-2026-114488

Уязвимость службы развертывания Windows Deployment Services операционных систем Windows связана с использованием памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

7.5CVSS7.3AI score0.00663EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•24 views

PT-2026-87609

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description A use-after-free condition exists in Windows Deployment Services, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the...

7.5CVSS7AI score0.00608EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•26 views

PT-2026-87860

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description A use after free condition in Windows Deployment Services allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use after fr...

7.5CVSS8AI score0.00663EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•27 views

PT-2026-87870

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description A use after free condition in Windows Deployment Services allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use after fr...

7.5CVSS8AI score0.00663EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•11 views

PT-2026-114493

Уязвимость службы развертывания Windows Deployment Services операционных систем Windows связана с переполнением буфера в динамической памяти. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...

7.8CVSS7.4AI score0.00333EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•27 views

PT-2026-87872

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

7.8CVSS7.8AI score0.00333EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/03 4:18 p.m.•22 views

CVE-2026-75034

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a...

7.4CVSS0.00323EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/09/03 3:01 p.m.•34 views

CVE-2026-75034 Rancher: SAML Assertion Replay

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a...

7.4CVSS5.7AI score0.00323EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/03 3:01 p.m.•20 views

EUVD-2026-70512

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a...

7.4CVSS5.8AI score0.00387EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/03 8:28 a.m.•43 views

monitor v0.41.0

BetterDB Monitor The monitoring layer that Valkey deserves. BetterDB persists what Valkey throws away - slowlogs, command patterns, client activity, anomaly signals - so you can debug what happened at 3am, not just what's happening now. Built for Valkey 8.x with native support for COMMANDLOG,...

6.6AI score
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2026/09/02 12:00 a.m.•26 views

TFTP Server Code Execution

The vulnerability of the TFTP server of the Windows Deployment Services service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.00974EPSS
SaveExploits0References2Affected Software14
Microsoft Secure
Microsoft Secure
•added 2026/09/01 10:48 p.m.•44 views

Counterfeit installers to system compromise: Tracking a deceptive software download campaign

In this article 1. Attack chain overview 2. Campaign scope and targeting 3. Mitigation and protection guidance 4. References 5. Learn more Microsoft Defender Experts is tracking an active malware campaign that uses counterfeit software-download websites to impersonate trusted vendors and distribu...

6.1AI score
SaveExploits0
NVD
NVD
•added 2026/09/01 8:17 p.m.•21 views

CVE-2026-78603

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding minimal Elasticsearch privileges could bypass Kibana feature authorization and space access controls, resulting ...

4.3CVSS0.00287EPSS
SaveExploits0References1
Mend
Mend
•added 2026/09/01 7:20 p.m.•11 views

CVE-2026-78603

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding minimal Elasticsearch privileges could bypass Kibana feature authorization and space access controls, resulting ...

5.3CVSS5.9AI score0.00287EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/01 7:20 p.m.•18 views

CVE-2026-78603 Missing Authorization in Kibana Leading to Unauthorized Disclosure of Fleet Deployment Metadata

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding minimal Elasticsearch privileges could bypass Kibana feature authorization and space access controls, resulting ...

4.3CVSS5.9AI score0.00287EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/01 7:20 p.m.•47 views

CVE-2026-78603 Missing Authorization in Kibana Leading to Unauthorized Disclosure of Fleet Deployment Metadata

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding minimal Elasticsearch privileges could bypass Kibana feature authorization and space access controls, resulting ...

4.3CVSS0.00287EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/09/01 7:20 p.m.•15 views

CVE-2026-78603 Missing Authorization in Kibana Leading to Unauthorized Disclosure of Fleet Deployment Metadata

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding minimal Elasticsearch privileges could bypass Kibana feature authorization and space access controls, resulting ...

4.3CVSS5.5AI score
SaveExploits0References3
Rows per page
Query Builder