Lucene search
+L

44664 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•6 views

CVE-2026-86358: Stack-based Buffer Overflow

Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution...

8.8CVSS5.9AI score0.00406EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•5 views

CVE-2026-71182: Improper Link Resolution Before File Access

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

6CVSS5.8AI score0.00148EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•9 views

PT-2026-93844

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

6CVSS5.8AI score0.00148EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•32 views

PT-2026-93322

Name of the Vulnerable Software and Affected Versions GitLab EE versions 18.11 through 19.1.7 GitLab EE versions 19.2 through 19.2.5 GitLab EE versions 19.3 through 19.3.1 Description Improper authorization controls on compliance framework management allow an authenticated user with the Security...

4.3CVSS6.4AI score0.00312EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•9 views

CVE-2026-71181: Improper Link Resolution Before File Access

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

6CVSS5.8AI score0.00148EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•10 views

CVE-2026-71180: Unchecked Return Value

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.2CVSS5.8AI score0.0015EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
•added 2026/09/16 12:00 a.m.•16 views

A GAN-Based Framework for Robust DDoS Attack Detection

The availability and consistency of online services remain vulnerable due to Distributed Denial of Service DDoS attacks. These attacks are evolving by adopting more complex strategies to evade traditional network security systems. Despite the effectiveness of machine learning models in detecting...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•8 views

PT-2026-93842

Name of the Vulnerable Software and Affected Versions Dell Update Package Framework versions prior to 26.07.03 Description An Unchecked Return Value issue exists where the software fails to properly verify the result of a function call. A low privileged attacker with local access can exploit this...

8.2CVSS5.7AI score0.0015EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2026/09/16 12:00 a.m.•17 views

The vulnerability of the Security Framework component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.

The vulnerability of the Security Framework component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP network protocol...

9.9CVSS6.6AI score0.00432EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/09/16 12:00 a.m.•13 views

The vulnerability of the Discovery Framework component of the Oracle Enterprise Manager Base Platform allows a hacker to gain full control over the application.

The vulnerability of the Discovery Framework component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTPS protocol...

9.9CVSS6.7AI score0.00432EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•16 views

GitLab 18.11 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-16794)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticate...

4.3CVSS6.5AI score0.00312EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/15 10:17 p.m.•29 views

CVE-2026-81855

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

9.3CVSS0.00589EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/15 10:14 p.m.•10 views

CLSA-2026-1789510477 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.30-tuxcare.11...

7.5CVSS6.6AI score0.0046EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/09/15 9:31 p.m.•51 views

CVE-2026-81855 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

9.3CVSS0.00589EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/15 9:31 p.m.•24 views

CVE-2026-81855 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

9.3CVSS5.8AI score0.00589EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/15 9:31 p.m.•55 views

CVE-2026-81855

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard , a marine engine management platform. An attacker with network access and no prior privileges can exploit this to gain high confidentiality and high integrity...

9.3CVSS5.8AI score0.00589EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/15 9:16 p.m.•17 views

CVE-2026-61554

emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the httppoll C2 transport accepts attacker-controlled HTTP polling sessions before CBOR MsgAuth authentication is completed. A remote unauthenticated attacker can create arbitrary polling sessions and send...

7.5CVSS0.00707EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/15 9:14 p.m.•18 views

zeek v9.0.0

The Zeek Network Security Monitor A powerful framework for network traffic analysis and security monitoring. Key Features — Documentation — Getting Started — Development — License Key Features In-depth Analysis Zeek ships with analyzers for many protocols, enabling high-level semantic analysis at...

6AI score
SaveExploits0References8
EUVD
EUVD
•added 2026/09/15 8:48 p.m.•20 views

EUVD-2026-79996

emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the httppoll C2 transport accepts attacker-controlled HTTP polling sessions before CBOR MsgAuth authentication is completed. A remote unauthenticated attacker can create arbitrary polling sessions and send...

7.5CVSS5.9AI score0.00707EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 8:18 p.m.•16 views

CVE-2026-83423

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle JDevelope...

8.8CVSS0.00417EPSS
SaveExploits0References1
Rows per page
Query Builder