Lucene search
+L

17463 matches found

NVD
NVD
added 2026/09/15 7:17 p.m.5 views

CVE-2026-0183

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

4.4CVSS0.00071EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 7:07 p.m.9 views

CVE-2019-12889

CVE-2019-12889 Resumen Existe una escalada de privilegios no autenticada en SailPoint Desktop Password Reset 7.2. Un usuario con acceso local únicamente a la pantalla de inicio de sesión de Windows puede escalar sus privilegios a NT AUTHORITY\System. Un atacante necesitaría acceso local a la...

7CVSS6.6AI score0.00618EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/09/15 6:36 p.m.29 views

CVE-2026-73465 On affected platforms running Arista EOS, under certain circumstances plaintext private keys

On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already...

6.3CVSS0.00094EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/15 6:34 p.m.4 views

CVE-2026-58721

CVE-2026-58721 is a local information disclosure vulnerability in the GSA subcomponent of Google Pixel devices, caused by uninitialized memory use in multiple locations. Exploitation requires System execution privileges and no user interaction. Google classifies this as Critical severity in the P...

4.4CVSS5.9AI score0.00073EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/09/15 6:34 p.m.4 views

EUVD-2026-79008

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

4.4CVSS5.9AI score0.00073EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/15 6:34 p.m.7 views

CVE-2026-56958

CVE-2026-56958 is an out-of-bounds read vulnerability in the gf_algo_get_cached_dump_data function of gf_algo.c, caused by a missing bounds check . This defect resides in Qualcomm's Graphics Firmware (GPU) subsystem used in Android devices. The flaw allows local information disclosure with low pr...

5.5CVSS5.9AI score0.0007EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/15 6:34 p.m.5 views

EUVD-2026-78971

In validatensbuf of mbuclass.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

4.4CVSS5.9AI score0.00073EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/15 6:34 p.m.30 views

CVE-2026-56945

In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00067EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 5:21 p.m.10 views

dirtypipe

Referencia: https://access.redhat.com/security/vulnerabilities/RHSB-2022-002 Diagnóstico Se ha desarrollado un script de detección de vulnerabilidades para determinar si su sistema se ve afectado actualmente por esta falla. Para verificar la autenticidad del script, también puede descargar la fir...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 2:05 p.m.6 views

Ph-n-t-ch-CVE-2024-40842-XProtectRemediatorDubRobber-Information-Leak-tr-n-macOS

CVE-2024-40842: Fuga de Información de XProtectRemediatorDubRobber en macOS Resumen CVE-2024-40842 es una vulnerabilidad de fuga de información local en XProtect Remediator de macOS, relacionada con el módulo: XProtectRemediatorDubRobber La vulnerabilidad surge del manejo inseguro de la variable ...

5.5CVSS5.9AI score0.00231EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 4:51 a.m.11 views

cve-2024-55591-poc

CVE-2024-55591 - Fortinet FortiOS Authentication Bypass An educational implementation in Go demonstrating the technical mechanics of CVE-2024-55591 , an authentication bypass vulnerability affecting Fortinet FortiOS. This repository is intended strictly for security research, defensive analysis,...

9.8CVSS8.5AI score0.98259EPSS
SaveExploits10
EUVD
EUVD
added 2026/09/15 12:31 a.m.7 views

EUVD-2026-78157

A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gfnodeunregister of the file scenegraph/basescenegraph.c of the component MP4Box. The manipulation results in use after free. The attack is only possible with local access. The exploit has been made public a...

4.8CVSS4.7AI score0.00161EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2026/09/15 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-90685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in GPAC up to f1219cde. Affected by this issue is the function lsrexeccommandlist of the file laser/lsrdec.c of the component...

2.8CVSS0.00111EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/15 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-90610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box...

4.8CVSS0.00118EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/14 11:18 p.m.6 views

CVE-2026-90831

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfdelfstrtabdelref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used...

5.3CVSS0.00161EPSS
SaveExploits0References7
NVD
NVD
added 2026/09/14 10:16 p.m.12 views

CVE-2026-90825

A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gfnodeunregister of the file scenegraph/basescenegraph.c of the component MP4Box. The manipulation results in use after free. The attack is only possible with local access. The exploit has been made public a...

4.8CVSS0.00161EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2026/09/14 9:15 p.m.27 views

CVE-2026-90825 GPAC MP4Box base_scenegraph.c gf_node_unregister use after free

A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gfnodeunregister of the file scenegraph/basescenegraph.c of the component MP4Box. The manipulation results in use after free. The attack is only possible with local access. The exploit has been made public a...

4.8CVSS0.00161EPSS
SaveExploits0References9
CVE
CVE
added 2026/09/14 9:15 p.m.11 views

CVE-2026-90825

CVE-2026-90825 is a use-after-free vulnerability in the MP4Box component of GPAC 26.07.0 , specifically in the gf_node_unregister function within scenegraph/base_scenegraph.c. Exploitation requires local access and low privileges, with no user interaction needed, resulting in a low availability i...

4.8CVSS4.7AI score0.00161EPSS
SaveExploits0References9
OSV
OSV
added 2026/09/14 9:15 p.m.4 views

CVE-2026-90825 GPAC MP4Box base_scenegraph.c gf_node_unregister use after free

A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gfnodeunregister of the file scenegraph/basescenegraph.c of the component MP4Box. The manipulation results in use after free. The attack is only possible with local access. The exploit has been made public a...

4.8CVSS5AI score
SaveExploits0References11
EUVD
EUVD
added 2026/09/14 7:40 p.m.7 views

EUVD-2026-77785

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization...

7.8CVSS6.6AI score0.00141EPSS
SaveExploits0References1
Rows per page
Query Builder