Lucene search
+L

627170 matches found

Kaspersky
Kaspersky
added 2026/09/01 12:00 a.m.8 views

KLA91251 Multiple vulnerabilities in Mozilla Thunderbird ESR

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1...

9.8CVSS6.5AI score0.00394EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.8 views

PT-2026-84465

Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary operating system commands by supplying a crafted PHP object graph in the back query GET parameter of the logout handler. Attackers can pass a base64-encoded serialized payloa...

8.8CVSS6.6AI score0.00565EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/09/01 12:00 a.m.7 views

Google Chrome < 152.0.7977.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 152.0.7977.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop advisory. - Use after free in Shared Tab Groups in Google Chrome on on Android prior to...

9.8CVSS6.3AI score0.00282EPSS
SaveExploits0References53
Tenable Nessus
Tenable Nessus
added 2026/09/01 12:00 a.m.6 views

PostgreSQL 18.x < 18.6 Multiple Vulnerabilities

The version of PostgreSQL installed on the remote host is 18 prior to 18.6. As such, it is potentially affected by multiple vulnerabilities: - Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, v...

8.8CVSS7.8AI score0.00427EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.12 views

PT-2026-84559

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

6.2AI score0.0023EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.8 views

PT-2026-84405

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...

9CVSS6.6AI score0.00524EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.14 views

PT-2026-84075

Name of the Vulnerable Software and Affected Versions WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode versions prior to 4.4.2 Description An arbitrary file upload issue exists due to missing file type validation in the saas upload logo function combin...

9.8CVSS6.5AI score0.00513EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.11 views

PT-2026-84547

Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

6.2AI score0.00243EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.12 views

PT-2026-84555

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

6.2AI score0.00077EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.10 views

PT-2026-84556

Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6.2AI score0.00221EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.9 views

PT-2026-84519

Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 Appliances affected versions not specified Description An OS Command Injection issue exists in the SMA1000 Appliance Management Console AMC. This occurs due to improper neutralization of special elements used in an OS command...

7.8CVSS7.8AI score0.01625EPSS
SaveExploits0References61
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.8 views

PT-2026-84467

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A daemon in AOS-CX improperly processes malformed input. An unauthenticated remote attacker can exploit this by sending specially crafted packets to the affected service, potentially leading t...

9.8CVSS6.4AI score0.00487EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.8 views

PT-2026-84212

Name of the Vulnerable Software and Affected Versions ControlFLASH versions 15.07 and earlier Description The installer grants write permissions to the Everyone group on the product installation directory. This flaw allows for arbitrary code execution, enabling an attacker to run any commands or...

7CVSS5.7AI score0.00105EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.14 views

PT-2026-84199

Name of the Vulnerable Software and Affected Versions Manacle Technologies ERP affected versions not specified Description Improper authentication controls and inadequate file type validation at the API endpoint allow an unauthenticated remote attacker to upload arbitrary files to a web accessibl...

10CVSS6AI score0.00547EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.9 views

PT-2026-84532

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.22 Description A Server-Side Request Forgery SSRF issue exists where insufficient network isolation allows malicious pre-receive hook code to impersonate an internal service. This enables the...

7.7CVSS6.2AI score0.00443EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.10 views

PT-2026-84454

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A flaw in the SSH daemon allows an unauthenticated remote attacker to gain administrative access to affected hosts. This could enable the execution of arbitrary command...

10CVSS5.8AI score0.00435EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2026/09/01 12:00 a.m.8 views

Google Chrome < 152.0.7977.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 152.0.7977.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop advisory. - Use after free in Shared Tab Groups in Google Chrome on on Android prior to...

9.8CVSS6.3AI score0.00282EPSS
SaveExploits0References53
Tenable Nessus
Tenable Nessus
added 2026/09/01 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-84268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that...

8.8CVSS6.2AI score0.00328EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/01 12:00 a.m.5 views

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

8.8CVSS6.2AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/09/01 12:00 a.m.7 views

Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-2111)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2111 advisory. FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicio...

9.8CVSS7.6AI score0.00397EPSS
SaveExploits1References44
Rows per page
Query Builder