Lucene search
+L

2338 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 3:34 p.m.•35 views

CVE-2026-44656

A flaw was found in Vim, an open-source command-line text editor. An attacker who controls the contents of a file can exploit an OS command injection vulnerability in Vim's :find command-line completion. This occurs when the path option, which can be set from a modeline, contains backtick-enclose...

5.3CVSS6.7AI score0.00808EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/06/04 1:22 p.m.•61 views

CVE-2019-25733 NetShareWatcher 1.5.8.0 SEH Buffer Overflow

NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to...

8.6CVSS0.00148EPSS
SaveExploits0References4
CVE
CVE
•added 2026/06/04 1:22 p.m.•38 views

CVE-2019-25733

NetShareWatcher 1.5.8.0 contains a structured exception handler (SEH) buffer overflow in which a malicious input in the Restrictions custom filter field can overwrite SEH/NSEH pointers and cause code execution when Find is invoked. This is a local vulnerability with high impact (CVSSv3.1/8.4, CVS...

8.6CVSS7.1AI score0.00148EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/06/04 1:22 p.m.•17 views

CVE-2019-25733 NetShareWatcher 1.5.8.0 SEH Buffer Overflow

NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to...

8.6CVSS7.1AI score0.00148EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/06/04 1:22 p.m.•24 views

EUVD-2019-20169

NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to...

8.6CVSS6.6AI score0.00148EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/06/04 1:22 p.m.•12 views

CVE-2019-25733

NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to...

8.6CVSS6.6AI score0.00148EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
•added 2026/06/01 10:03 p.m.•33 views

CVE-2026-38945

Command injection in Raynet rvia version 12.6 Update 8 and previous versions allows adversaries to execute arbitrary code via a crafted path that matches the improperly terminated search criteria of rvia's Java search using the find command...

7.8CVSS6.2AI score0.01181EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/29 11:11 a.m.•21 views

OESA-2026-2472 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

7CVSS7.2AI score0.01172EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/05/28 8:12 p.m.•25 views

CVE-2025-69600

Command injection in Raynet rvia RayVentory Scan Engine 12.6 Update 8 and previous versions allows adversaries to execute commands via getconfig, upload, inventory, and oracle options...

7.8CVSS5.9AI score0.00826EPSS
SaveExploits2References1
PyPA
PyPA
•added 2026/05/28 6:16 p.m.•18 views

PYSEC-2026-2226

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot UI object-bulk-rename endpoints for example, /dcim/interfaces/rename/ were vulnerable to application-wide denial of service via maliciously crafted regular expressions in the find field in...

6.5CVSS6.1AI score0.0056EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2026/05/28 6:16 p.m.•32 views

CVE-2026-44796

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot UI object-bulk-rename endpoints for example, /dcim/interfaces/rename/ were vulnerable to application-wide denial of service via maliciously crafted regular expressions in the find field in...

6.5CVSS0.0056EPSS
SaveExploits0References5
OSV
OSV
•added 2026/05/28 6:16 p.m.•20 views

PYSEC-2026-2226

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot UI object-bulk-rename endpoints for example, /dcim/interfaces/rename/ were vulnerable to application-wide denial of service via maliciously crafted regular expressions in the find field in...

6.5CVSS6.1AI score0.0056EPSS
SaveExploits0References5
OSV
OSV
•added 2026/05/28 12:13 p.m.•15 views

SUSE-SU-2026:21859-1 Security update for vim

This update for vim fixes the following issues - CVE-2026-39881: command injection in NetBeans interface can lead to arbitrary file reads and writes bsc1261833. - CVE-2026-42307: Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim...

7.8CVSS7.1AI score0.01172EPSS
SaveExploits1References14
OSV
OSV
•added 2026/05/28 12:13 p.m.•15 views

OPENSUSE-SU-2026:20828-1 Security update for vim

This update for vim fixes the following issues - CVE-2026-39881: command injection in NetBeans interface can lead to arbitrary file reads and writes bsc1261833. - CVE-2026-42307: Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim...

7.8CVSS7.1AI score0.01172EPSS
SaveExploits1References13
SUSE CVE
SUSE CVE
•added 2026/05/28 3:53 a.m.•18 views

SUSE CVE-2026-46061

In the Linux kernel, the following vulnerability has been resolved: jbd2: fix deadlock in jbd2journalcancelrevoke Commit f76d4c28a46a "fs/jbd2: use sleeping version of findgetblock" changed jbd2journalcancelrevoke to use findgetblocknonatomic which holds the folio lock instead of iprivatelock. Th...

4.7CVSS5.9AI score0.00125EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•6 views

CVE-2026-44796: Uncontrolled Resource Consumption

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot UI object-bulk-rename endpoints for example, /dcim/interfaces/rename/ were vulnerable to application-wide denial of service via maliciously crafted regular expressions in the find field in...

6.5CVSS5.8AI score0.0056EPSS
SaveExploits0References6
NVD
NVD
•added 2026/05/27 6:16 p.m.•24 views

CVE-2025-69600

Command injection in Raynet rvia RayVentory Scan Engine 12.6 Update 8 and previous versions allows adversaries to execute commands via getconfig, upload, inventory, and oracle options...

7.8CVSS0.00826EPSS
SaveExploits2References3
NVD
NVD
•added 2026/05/27 5:16 p.m.•33 views

CVE-2026-38945

Command injection in Raynet rvia version 12.6 Update 8 and previous versions allows adversaries to execute arbitrary code via a crafted path that matches the improperly terminated search criteria of rvia's Java search using the find command...

7.8CVSS0.01181EPSS
SaveExploits0References4
NVD
NVD
•added 2026/05/27 2:17 p.m.•27 views

CVE-2026-46061

In the Linux kernel, the following vulnerability has been resolved: jbd2: fix deadlock in jbd2journalcancelrevoke Commit f76d4c28a46a "fs/jbd2: use sleeping version of findgetblock" changed jbd2journalcancelrevoke to use findgetblocknonatomic which holds the folio lock instead of iprivatelock. Th...

5.5CVSS0.00125EPSS
SaveExploits0References4
NVD
NVD
•added 2026/05/27 2:17 p.m.•25 views

CVE-2026-45912

In the Linux kernel, the following vulnerability has been resolved: ext4: don't cache extent during splitting extent Caching extents during the splitting process is risky, as it may result in stale extents remaining in the status tree. Moreover, in most cases, the corresponding extent block entri...

5.5CVSS0.00162EPSS
SaveExploits0References8
Rows per page
Query Builder