Lucene search
+L

610990 matches found

Tenable Nessus
Tenable Nessus
added 5 days ago6 views

Linux Distros Unpatched Vulnerability : CVE-2026-6464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If th...

8.1CVSS5.7AI score0.00492EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 5 days ago10 views

Linux Distros Unpatched Vulnerability : CVE-2026-14670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the...

8.8CVSS6.1AI score0.00596EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 5 days ago7 views

Linux Distros Unpatched Vulnerability : CVE-2026-19385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in PostgreSQL pgdump of long function transform lists allows an object creator to execute arbitrary code as the operating system user runni...

8.8CVSS6.4AI score0.00596EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 5 days ago7 views

Linux Distros Unpatched Vulnerability : CVE-2026-48553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the...

7.7CVSS5.9AI score0.00523EPSS
SaveExploits0References3
PostrgeSql
PostrgeSql
added 5 days ago11 views

Vulnerability in core server (CVE-2026-6471)

PostgreSQL logical decoding can dlopen arbitrary file Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn ru...

7.2CVSS5.5AI score0.00513EPSS
SaveExploits0References1Affected Software1
PostrgeSql
PostrgeSql
added 5 days ago11 views

Vulnerability in core server (CVE-2026-16239)

PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions...

8.8CVSS5.8AI score0.0059EPSS
SaveExploits0References1Affected Software1
PostrgeSql
PostrgeSql
added 5 days ago11 views

Vulnerability in contrib module (CVE-2026-15742)

PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL...

8.8CVSS5.8AI score0.00479EPSS
SaveExploits0References1Affected Software1
PostrgeSql
PostrgeSql
added 5 days ago11 views

Vulnerability in core server (CVE-2026-14680)

PostgreSQL type confusion via "internal" arguments Type confusion with PostgreSQL "internal" data type arguments allows any user to execute arbitrary code as the operating system user running the database, via calls to functions with that argument type. Type "internal" represents a class of...

8.8CVSS5.8AI score0.0059EPSS
SaveExploits0References1Affected Software1
PostrgeSql
PostrgeSql
added 5 days ago10 views

Vulnerability in core server (CVE-2026-14670)

PostgreSQL plperl tied object heap buffer overflow executes arbitrary code Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body. Versions before PostgreSQL...

8.8CVSS6AI score0.00596EPSS
SaveExploits0References1Affected Software1
PostrgeSql
PostrgeSql
added 5 days ago10 views

Vulnerability in core server (CVE-2026-14664)

PostgreSQL regexp heap buffer overflow executes arbitrary code Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006,...

8.8CVSS6AI score0.00596EPSS
SaveExploits0References1Affected Software1
PostrgeSql
PostrgeSql
added 5 days ago10 views

Vulnerability in core server (CVE-2026-14662)

PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may...

8.8CVSS5.7AI score0.00655EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 5 days ago15 views

Security Updates for Microsoft Word Products C2R (August 2026)

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-58651, CVE-2026-64915 - Stack-based buffer overflow in Microsof...

7.8CVSS6.8AI score0.00459EPSS
SaveExploits0References18
Tenable Nessus
Tenable Nessus
added 5 days ago11 views

Linux Distros Unpatched Vulnerability : CVE-2026-53783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell wrapper that allows authenticated...

8.6CVSS5.5AI score0.00374EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 5 days ago2 views

PT-2026-71665

Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, the setStyle function in src/segments/path.go passed pt.Path, which includes raw folder names, to template.Render, whose function map exposes cmd, so an attacker-controlled directory name...

7.8CVSS5.4AI score0.00154EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 5 days ago9 views

Malicious code in bs58-15 (npm)

npm/bs58-15 is a typosquat of the popular bs58 base58 codec cryptocoinjs. The package contains no malicious code of its own: its src/cjs/index.cjs simply does require"base65-15x" and re-exports it. Its sole purpose is to pull in the malicious sink package base65-15x as a runtime dependency declar...

5.4AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 5 days ago5 views

PT-2026-71888

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.0-rc.2, OpenChoreo Workflow Plane templates under samples/getting-started/workflow-templates/ interpolated developer-controlled workflow parameters into shell program text executed through sh -...

8.8CVSS5.4AI score0.00615EPSS
SaveExploits0References13
Redos
Redos
added 5 days ago6 views

ROS-20260813-73-0051

The vulnerability in Wireshark is related to overflowing of buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.5CVSS5.8AI score0.00092EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 5 days ago9 views

Security Updates for Microsoft Access Products C2R (August 2026)

The Microsoft Access Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. CVE-2026-64906, CVE-2026-64908, CVE-2026-64914, CVE-2026-64920 -...

7.8CVSS7.8AI score0.00393EPSS
SaveExploits0References7
AlmaLinux
AlmaLinux
added 5 days ago16 views

Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files...

9.8CVSS8.1AI score0.0038EPSS
SaveExploits0References10
OSV
OSV
added 5 days ago4 views

UBUNTU-CVE-2026-73248

calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled compositetemplate metadata from a malicious EPUB, OPF, PDF, or similar file through program: and a nested template call whose formatter does not inherit allowpythontemplates=False, allowing a nested python:...

8.5CVSS5.7AI score0.00149EPSS
SaveExploits0References5
Rows per page
Query Builder