Lucene search
+L

2536605 matches found

CVE
CVE
added 1 hour ago6 views

CVE-2026-48407

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6AI score
SaveExploits0References1
CVE
CVE
added 1 hour ago10 views

CVE-2026-48404

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6AI score
SaveExploits0References1
Cvelist
Cvelist
added 1 hour ago3 views

CVE-2026-48404 Lightroom Classic | Out-of-bounds Write (CWE-787)

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS
SaveExploits0References1
Cvelist
Cvelist
added 1 hour ago3 views

CVE-2026-48410 Lightroom Classic | Out-of-bounds Write (CWE-787)

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS
SaveExploits0References1
CVE
CVE
added 1 hour ago7 views

CVE-2026-48410

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6AI score
SaveExploits0References1
Cvelist
Cvelist
added 1 hour ago3 views

CVE-2026-47940 Lightroom Classic | Integer Overflow or Wraparound (CWE-190)

Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS
SaveExploits0References1
CVE
CVE
added 1 hour ago4 views

CVE-2026-47940

Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6AI score
SaveExploits0References1
Cvelist
Cvelist
added 1 hour ago3 views

CVE-2026-20901

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...

4CVSS
SaveExploits0References1
EUVD
EUVD
added 1 hour ago2 views

EUVD-2026-56788

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...

4CVSS5.2AI score
SaveExploits0References1
CVE
CVE
added 1 hour ago6 views

CVE-2026-20901

Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack...

4CVSS5.2AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 1 hour ago2 views

Malicious code in zeal-rq-hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf7e926ec85f72f362263a19d4f99c4b215ddd94ed4454c669c3387cacee164 The package includes canary.js which imports os/http/https and, at line 123, POSTs a JSON body containing os.hostname, os.userInfo, process.platform,...

5.3AI score
SaveExploits0References1
NVD
NVD
added 1 hour ago1 views

CVE-2026-73083

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOXCODEONLY mode, the engine loads the compiled user module with importFresh, a wrapper around Node.js require, before the V8 isolate is applied. Top-level module code can therefore call require'childprocess',...

7.6CVSS
SaveExploits0References2
NVD
NVD
added 1 hour ago1 views

CVE-2026-73082

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/projects/:projectId/mcp-server/validate-agent-mcp-tool endpoint makes an outbound HTTP or SSE request to a user-supplied serverUrl without URL validation or SSRF protection. An authenticated user can...

5.3CVSS
SaveExploits0References4
NVD
NVD
added 1 hour ago1 views

CVE-2026-73084

Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoint embeds the user-supplied code query parameter directly into an inline script block without proper escaping. A crafted request to /api/redirect with a malicious code value can...

6.1CVSS
SaveExploits0References3
NVD
NVD
added 1 hour ago1 views

CVE-2026-73081

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of...

8.7CVSS
SaveExploits0References2
NVD
NVD
added 1 hour ago1 views

CVE-2026-71331

Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...

8.1CVSS
SaveExploits0References1
NVD
NVD
added 1 hour ago2 views

CVE-2026-71387

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by...

8.8CVSS
SaveExploits0References1
NVD
NVD
added 1 hour ago2 views

CVE-2026-71386

is affected by a Cross-site Scripting XSS vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by default...

8.8CVSS
SaveExploits0References1
NVD
NVD
added 1 hour ago1 views

CVE-2026-70354

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

7.8CVSS
SaveExploits0References1
NVD
NVD
added 1 hour ago1 views

CVE-2026-70336

Improper control of generation of code 'code injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

8.8CVSS
SaveExploits0References1
Rows per page
Query Builder