Lucene search
+L

59297 matches found

Zero Day Initiative
Zero Day Initiative
•added 2026/08/11 12:00 a.m.•9 views

OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.9AI score0.00284EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•20 views

PT-2026-70809

Name of the Vulnerable Software and Affected Versions Lightroom Classic affected versions not specified Description An out-of-bounds write issue exists that could allow arbitrary code execution within the context of the current user. This occurs when a user opens a specially crafted malicious fil...

7.8CVSS6.1AI score0.00256EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•11 views

PT-2026-70820

Name of the Vulnerable Software and Affected Versions Lightroom Classic affected versions not specified Description An Incorrect Authorization issue allows for arbitrary code execution within the context of the current user. Exploitation requires user interaction, specifically the opening of a...

7.7CVSS6.1AI score0.00218EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•10 views

PT-2026-70350

Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description A Heap-based Buffer Overflow occurs, which may allow arbitrary code execution within the context of the current user. A Heap-based Buffer Overflow is a memory corruption issue that happens...

8.1CVSS6.3AI score0.01257EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•13 views

PT-2026-70322

is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction...

8.2CVSS5.3AI score0.00788EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•10 views

PT-2026-70340

🚨 CVE-2026-34175 Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable...

6.7CVSS5.8AI score0.00157EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•18 views

PT-2026-70383

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Integer Overflow or Wraparound issue exists, which occurs when an arithmetic operation attempts to create a numeric value that is outside of the range that can be represent...

6.2CVSS6.3AI score0.00289EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•12 views

PT-2026-70374

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Uncontrolled Resource Consumption issue exists that could lead to an application denial-of-service. An attacker can exhaust system resources to cause the application to...

6.2CVSS6.4AI score0.00259EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•9 views

PT-2026-70382

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Integer Overflow or Wraparound issue exists, which occurs when an arithmetic operation attempts to create a numeric value that is outside of the range that can be represent...

6.2CVSS6.3AI score0.00302EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
•added 2026/08/11 12:00 a.m.•13 views

Samsung Galaxy S25 TIFF File Processing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S25 devices. User interaction may be required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.6AI score0.00521EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•2 views

CVE-2026-48406: Out-of-bounds Write

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00256EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•14 views

PT-2026-70321

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An Improper Input Validation issue allows a low-privileged attacker to achieve privilege escalation, granting unauthorized read and write access. This...

8.7CVSS5.2AI score0.00864EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•14 views

PT-2026-70384

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Improper Limitation of a Pathname to a Restricted Directory, also known as Path Traversal, allows for arbitrary file system read. This issue enables an attacker to access...

5.5CVSS6.1AI score0.00293EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•17 views

PT-2026-70808

Name of the Vulnerable Software and Affected Versions Lightroom Classic affected versions not specified Description An out-of-bounds write issue exists that could allow arbitrary code execution in the context of the current user. This occurs when a user opens a malicious file, requiring user...

7.8CVSS6.1AI score0.00256EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•14 views

PT-2026-70825

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

10CVSS6.6AI score0.01166EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•11 views

PT-2026-70824

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions prior to 2026-aug Magento Open Source versions prior to 2026-aug Adobe Commerce B2B versions prior to 1.5.3–1.3.3-2026-aug Description An incorrect authorization issue exists in the authorization mechanism that fails to...

9.4CVSS8.2AI score0.87507EPSS
SaveExploits1References60
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•3 views

CVE-2026-71398: Incorrect Authorization

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

10CVSS9.1AI score0.01166EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•9 views

PT-2026-70344

Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. This allows an attacker to execute arbitrary code in the context of the curre...

10CVSS6.3AI score0.03505EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•16 views

PT-2026-70380

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Improper Limitation of a Pathname to a Restricted Directory, known as Path Traversal, allows for arbitrary file system read. This issue enables an attacker to gain...

7.1CVSS7AI score0.003EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•12 views

PT-2026-70803

Name of the Vulnerable Software and Affected Versions Lightroom Classic affected versions not specified Description An Integer Overflow or Wraparound issue exists, which could allow arbitrary code execution within the context of the current user. This occurs when a user opens a specially crafted...

7.8CVSS6AI score0.00314EPSS
SaveExploits0References3
Rows per page
Query Builder