Lucene search
+L

37943 matches found

OSV
OSV
added 2026/07/27 5:40 a.m.6 views

BIT-DOTNET-2026-50648 .NET Framework Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network...

7.5CVSS7AI score0.0084EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/27 5:40 a.m.10 views

BIT-DOTNET-2026-50646 .NET Framework Remote Code Execution Vulnerability

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...

7.8CVSS7.2AI score0.00949EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/27 5:40 a.m.7 views

BIT-DOTNET-SDK-2026-50646 .NET Framework Remote Code Execution Vulnerability

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...

7.8CVSS7.2AI score0.00949EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/27 5:39 a.m.7 views

BIT-DOTNET-SDK-2026-50527 .NET Framework Denial of Service Vulnerability

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network...

7.5CVSS7.3AI score0.0084EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/27 5:39 a.m.6 views

BIT-DOTNET-2026-50527 .NET Framework Denial of Service Vulnerability

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network...

7.5CVSS7.3AI score0.0084EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/27 5:39 a.m.7 views

BIT-DOTNET-SDK-2026-50526 .NET Tampering Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

7CVSS7AI score0.00236EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/27 5:39 a.m.7 views

BIT-DOTNET-SDK-2026-50524 .NET Framework Denial of Service Vulnerability

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.00634EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/27 5:39 a.m.8 views

BIT-DOTNET-2026-50524 .NET Framework Denial of Service Vulnerability

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.00634EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/27 5:39 a.m.5 views

BIT-DOTNET-2026-47304 .NET Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

9.8CVSS5.8AI score0.00216EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/27 5:39 a.m.8 views

BIT-DOTNET-2026-47302 .NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.01029EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/27 5:39 a.m.6 views

BIT-DOTNET-2026-47300 ASP.NET Core Elevation of Privilege Vulnerability

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.00527EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/07/27 4:16 a.m.47 views

Symfony Profiler - Remote Access via Injected Arguments

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

7.3CVSS7.1AI score0.63422EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/07/27 4:16 a.m.115 views

XStream <1.4.15 - Server-Side Request Forgery

XStream before 1.4.15 is susceptible to server-side request forgery. An attacker can request data from internal resources that are not publicly available by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorize...

7.7CVSS7AI score0.81817EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/07/27 4:16 a.m.238 views

ZK Framework - Information Disclosure

ZK Framework 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 is susceptible to information disclosure. An attacker can access sensitive information via a crafted POST request to the component AuUploader and thereby possibly obtain additional sensitive information, modify data, and/or execute...

7.5CVSS7.4AI score0.95335EPSS
SaveExploits5References5
Apple
Apple
added 2026/07/27 12:0 a.m.8 views

About the security content of tvOS 26.6

About the security content of tvOS 26.6 This document describes the security content of tvOS 26.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.8CVSS7.5AI score0.0057EPSS
SaveExploits3References1Affected Software1
Apple
Apple
added 2026/07/27 12:0 a.m.10 views

About the security content of macOS Tahoe 26.6

About the security content of macOS Tahoe 26.6 This document describes the security content of macOS Tahoe 26.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

9.8CVSS7.9AI score0.49727EPSS
SaveExploits19References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/27 12:0 a.m.16 views

PT-2026-65014

Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.0029EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/27 12:0 a.m.10 views

PT-2026-65020

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.00736EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/27 12:0 a.m.11 views

PT-2026-65027

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...

7.8CVSS6AI score0.00949EPSS
SaveExploits0References3
Apple
Apple
added 2026/07/27 12:0 a.m.10 views

About the security content of iOS 26.6 and iPadOS 26.6

About the security content of iOS 26.6 and iPadOS 26.6 This document describes the security content of iOS 26.6 and iPadOS 26.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

9.8CVSS7.7AI score0.00462EPSS
SaveExploits2References1Affected Software2
Rows per page
Query Builder