Lucene search
+L

261303 matches found

OSV
OSV
added 2026/09/08 5:15 p.m.4 views

CLSA-2026-1788887721 TuxCare security update for 10 packages (1 CVE)

TuxCare rebuilt 10 packages to address 1 CVE. Fixed in 3.1.3.RELEASE-tuxcare.2...

9CVSS8AI score0.00427EPSS
SaveExploits0
CVE
CVE
added 2026/09/08 5:12 p.m.35 views

CVE-2026-58600

CVE-2026-58600 is a heap-based buffer overflow in the HEVC Video Extensions component of the Microsoft Windows Codecs Library . An unauthorized attacker with local access can leverage this flaw to elevate privileges , achieving high impact on confidentiality, integrity, and availability (CVSS 3.1...

7.8CVSS5.9AI score0.0033EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 5:12 p.m.7 views

EUVD-2026-73077

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.0033EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/08 5:12 p.m.4 views

USN-8679-2 vim vulnerability

USN-8679-1 fixed a vulnerability in Vim. This update provides the corresponding update for Ubuntu 26.04 LTS. Original advisory details: It was discovered that Vim incorrectly handled certain tags files. An attacker could possibly use this issue to execute arbitrary code...

7.1CVSS6.6AI score0.00147EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/08 5:12 p.m.7 views

EUVD-2026-73062

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...

7.1CVSS6.2AI score0.00522EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:12 p.m.23 views

CVE-2026-69775

CVE-2026-69775 is a use-after-free vulnerability in the Windows DWM Core Library that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires network access, ...

7.5CVSS6.2AI score0.00522EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2026/09/08 5:10 p.m.47 views

CVE-2026-69276

CVE-2026-69276 is an integer underflow (wrap or wraparound) in the Microsoft UxTheme Library (uxtheme.dll) that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 9.8 (Critical) , reflecting network-based attack vector with no privileges or us...

9.8CVSS6AI score0.00929EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/08 4:12 p.m.6 views

CVE-2026-82068 Persistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of Service

A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retryable write commands. The crash state is durably persisted, causing the server process to repeatedly crash on restart and potentiall...

7.1CVSS
SaveExploits0References3
OSV
OSV
added 2026/09/08 4:12 p.m.7 views

CVE-2026-82066 Heap Out-of-Bounds Read in MongoDB Server Query Planning Component

A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the server to read memory beyond allocated buffer boundaries. T...

5.3CVSS
SaveExploits0References3
OSV
OSV
added 2026/09/08 4:12 p.m.5 views

CVE-2026-82064 Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...

8.7CVSS
SaveExploits0References3
OSV
OSV
added 2026/09/08 4:12 p.m.5 views

CVE-2026-82063 Use-After-Free in MongoDB Server Cursor Management Component Leads to Denial of Service

A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during curso...

6CVSS
SaveExploits0References3
OSV
OSV
added 2026/09/08 3:43 p.m.17 views

ROOT-APP-NPM-CVE-2026-59875 CVE-2026-59875 in tar - Patched by Root

Root has patched CVE-2026-59875 in the tar package for Root:npm. Multiple fixed versions available...

5.3CVSS6.8AI score0.00507EPSS
SaveExploits0
OSV
OSV
added 2026/09/08 3:29 p.m.5 views

CLSA-2026-1788881357 TuxCare security update for org.thymeleaf:thymeleaf (1 CVE)

TuxCare rebuilt org.thymeleaf:thymeleaf to address 1 CVE. Fixed in 3.1.3.RELEASE-tuxcare.2...

9CVSS8AI score0.00427EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2026/09/08 3:17 p.m.12 views

USN-8737-1: GNU C Library vulnerabilities

It was discovered that GNU C Library had a buffer overflow in the strfmon function when handling right-justification padding. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. CVE-2026-19499 It was discover...

9CVSS6.7AI score0.00412EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/08 3:05 p.m.7 views

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring

Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 3.5.19 Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and...

9.8CVSS6.8AI score0.00422EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/08 3:02 p.m.11 views

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring

Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 2.7.43 Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and...

9.8CVSS6.7AI score0.00422EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2026/09/08 2:13 p.m.4 views

CLSA-2026-1788876797 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 2 CVEs. Fixed in 6.1.15-tuxcare.5...

6.5CVSS5.8AI score0.00344EPSS
SaveExploits0
OSV
OSV
added 2026/09/08 2:03 p.m.10 views

CLSA-2026-1788876191 TuxCare security update for org.springframework (8 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 8 CVEs. Fixed in 5.3.24-tuxcare.8...

9.8CVSS5.8AI score0.00324EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/09/08 2:00 p.m.10 views

Windows DWM Core Library Elevation of Privilege Vulnerability

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...

7.5CVSS6.2AI score0.00522EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/09/08 2:00 p.m.36 views

Web Media Extensions Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.0049EPSS
SaveExploits0
Rows per page
Query Builder