Lucene search
+L

57918 matches found

CVE
CVE
•added 2026/04/14 8:40 a.m.•38 views

CVE-2026-27668

CVE-2026-27668 affects RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) with all versions below v5.8. The issue allows an authenticated User Administrator to escalate their own privileges by administering groups they belong to, enabling access to any device group at any access level. Docu...

8.8CVSS5.7AI score0.00417EPSS
SaveExploits0References1
OSV
OSV
•added 2026/04/14 2:46 a.m.•13 views

MINI-H264-V6XQ-9GFG

Bulletin has no description...

7.5CVSS5.7AI score0.00758EPSS
SaveExploits0
Kaspersky
Kaspersky
•added 2026/04/14 12:00 a.m.•87 views

KLA90980 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges, spoof user interface, execute arbitrary code, cause denial of service, read local...

8CVSS7.1AI score0.04902EPSS
SaveExploits5References121
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•14 views

PT-2026-32695

CVE-2026-4832 CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able… https://t.co/N2CPBzZjrp...

6.9CVSS5.8AI score0.00419EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•1 views

CVE-2026-27915: Use After Free

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00333EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•22 views

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There is a resource management vulnerability in Microsoft Windows Universal Plug and Play UPnP Device Host. Attackers can exploit this vulnerability to obtain sensitive information. The following...

6.5CVSS5.8AI score0.00537EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•16 views

PT-2026-32781

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP Device Host affected versions not specified Description An untrusted pointer dereference in the Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally,...

7.8CVSS6.2AI score0.00333EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•13 views

PT-2026-32610

A vulnerability has been identified in Industrial Edge Management Pro V1 All versions = V1.7.6 = V2.0.0 = V2.2.0 V2.8.0. Affected management systems do not properly enforce user authentication on remote connections to devices. This could facilitate an unauthenticated remote attacker to circumvent...

7.1CVSS5.8AI score0.00364EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•19 views

Microsoft Windows GDI 缓冲区错误漏洞

Microsoft Windows GDI is a core underlying standard interface in the Windows operating system developed by Microsoft, responsible for drawing graphical objects on the screen or printer, managing fonts, and processing images. There is a buffer error vulnerability present in Microsoft Windows GDI...

5.5CVSS6AI score0.00541EPSS
SaveExploits0References1
Redos
Redos
•added 2026/04/14 12:00 a.m.•17 views

ROS-20260414-73-0049

A vulnerability in the storvschostresethandler function of the drivers/scsi/storvscdrv.c module of the Linux kernel SCSI device driver is related to pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS5.8AI score0.00145EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•0 views

CVE-2026-32077: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS5.5AI score0.00414EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•0 views

CVE-2026-27920: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS5.5AI score0.00333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•0 views

CVE-2026-27916: Use After Free

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•0 views

CVE-2026-32156: Use After Free

Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute code locally...

7.4CVSS6.3AI score0.00288EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•0 views

CVE-2026-32075: Use After Free

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•13 views

PT-2026-32803

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP Device Host affected versions not specified Description An untrusted pointer dereference in the Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00414EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•9 views

PT-2026-32787

🪟 CVE-2026-27925 is a “tiny” UPnP info leak, but Microsoft’s confidence rating says it’s not vibes. Translation: check your UPnP like it’s always on. Because Windows. https://t.co/9ZeUDJeewg WindowsSecurity InformationDisclosure UpnpDeviceHost CveTriage https://t.co/pALAQX9nwt...

6.5CVSS6.2AI score0.00537EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•10 views

PT-2026-32826

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use after free in the Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute arbitrary code locally and remotely, affecting the system. Use after free i...

7.4CVSS6.6AI score0.00288EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•14 views

PT-2026-32609

Name of the Vulnerable Software and Affected Versions RUGGEDCOM CROSSBOW Secure Access Manager Primary SAM-P versions prior to 5.8 Description User Administrators are permitted to administer groups to which they belong. This flaw allows an authenticated User Administrator to escalate their...

8.8CVSS5.8AI score0.00417EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•12 views

PT-2026-32778

CVE-2026-27916 Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally. https://t.co/58w4XiQTfi...

7.8CVSS6.2AI score0.00333EPSS
SaveExploits0References3
Rows per page
Query Builder