394170 matches found
EUVD-2026-93880
A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code...
CVE-2026-76753
A format string vulnerability exists in an affected service interface of HPE Networking ClearPass Policy Manager . This flaw could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation of this vulnerability may lead to arbitrary code execution . No specific s...
CVE-2026-76753 Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager
A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code...
CVE-2026-8053-MongoDB
CVE-2026-8053 — MongoDB Server Out-of-Bounds Write Resumen Propiedad| Valor ---|--- Código CVE| CVE-2026-8053 Nombre técnico| FlatBSON Duplicate Field Index Drift Tipo de vulnerabilidad| CWE-787 — Out-of-bounds Write CVSS v4.0| 8.7 HIGH CVSS v3.1| 8.8 HIGH EPSS| 0.064% percentil 20 — baja...
EUVD-2026-93874
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to expose sensitive memory contents and cause a denial of service on the device...
EUVD-2026-93980
An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose sensitive memory contents and cause a denial of service on the affected device...
CVE-2026-76745 Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-S
Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code...
EUVD-2026-93979
Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code...
CVE-2026-76745
Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker . Successful exploitation of these vulnerabilities could allow an attacker to achieve Remote Code Execution (RCE) . The provided documents do not specify the exact component, root cause, or...
CVE-2026-76745 Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-S
Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code...
cve-2025-5777
CitrixBleed2 - CVE-2025-5777 PoC Scanner This repository contains an advanced Proof of Concept PoC scanner for CVE-2025-5777 , dubbed CitrixBleed2 , a memory disclosure vulnerability affecting Citrix NetScaler ADC and Gateway. I did some changes to the original poc, this script is based on resear...
Elasticsearch 9.4.7, 9.5.3, 8.19.23 Security Update (ESA-2026-192)
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to Denial of Service via Excessive Allocation CAPEC-130. Elasticsearch enforces a size limit on the user-suppli...
EUVD-2026-93615
Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a crafted file. Chromium security severity: Low...
CVE-2026-106399
Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a crafted file. Chromium security severity: Low...
CVE-2026-106399
An out-of-bounds read vulnerability exists in the Skia component of Google Chrome prior to version 155.0.8059.39 . A local attacker could use social engineering to trick a user into opening a crafted file , potentially allowing the attacker to read memory . The Chromium security severity for this...
CVE-2026-106275
Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-93608
Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106275
Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to an information disclosure flaw. The root cause is an uninitialized resource within the Graphics Processing Unit (GPU) component. A remote attacker can exploit this by tricking a user into opening a crafted HTML page , which...