Lucene search
+L

35205 matches found

CVE
CVE
•added 2026/09/08 12:10 a.m.•98 views

CVE-2026-58240

SAP NetWeaver Message Server fails to sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the service can register an unauthorized component and potentially perform unauthorized actions within the...

9.8CVSS8.2AI score0.00528EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•23 views

PT-2026-87112

An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...

6.5AI score0.00695EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•24 views

PT-2026-87639

Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A use-after-free condition in Windows Message Queuing allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when...

7CVSS6AI score0.00264EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•26 views

PT-2026-87582

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

9.8CVSS8.6AI score0.00974EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•22 views

PT-2026-87301

Name of the Vulnerable Software and Affected Versions Windows Message Queuing Queue Manager affected versions not specified Description An out-of-bounds read occurs in the Windows Message Queuing Queue Manager, which allows an unauthorized attacker to cause a denial of service over a network. An...

7.5CVSS5.8AI score0.01174EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•12 views

CVE-2026-69579: Use After Free

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

9.8CVSS8.8AI score0.00974EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•67 views

PT-2026-88337

HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and renderers that emit a form's errors interpolate the error string straight into HTML with no escaping. Two of the library's own messages, no...

6.1CVSS5.7AI score0.00255EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•20 views

PT-2026-87850

Name of the Vulnerable Software and Affected Versions Windows Message Queuing Queue Manager affected versions not specified Description A buffer over-read in the Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose sensitive information over a network. Recommendations...

7.5CVSS5.9AI score0.01027EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•7 views

CVE-2026-72932: Buffer Over-read

Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.8AI score0.01027EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•21 views

PT-2026-87561

Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network...

5.7CVSS5.7AI score0.00894EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/08 12:00 a.m.•15 views

CVE-2026-79574

An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...

6.6AI score0.00695EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•22 views

PT-2026-87033

The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 3.3.205 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Custom-level...

6.4CVSS5.9AI score0.00331EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/08 12:00 a.m.•35 views

CVE-2026-79574

An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...

0.00695EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 12:00 a.m.•32 views

CVE-2026-79574

The mpush gateway server (version v0.8.1 ) is vulnerable to arbitrary code execution due to an issue where an attacker can send a crafted broadcast message . This vulnerability allows for unauthorized command execution on the target server. While the documents confirm the existence of a proof of ...

9.8CVSS6.6AI score0.00695EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 12:00 a.m.•13 views

EUVD-2026-72911

An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...

6.5AI score0.00695EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•20 views

PT-2026-87140

An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...

7.1CVSS5.7AI score0.001EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-88142

A new vulnerability with increased severity was disclosed for Microsoft Windows CVE-2026-83997 https://t.co/Di6uxnlzNX...

8.1CVSS5.8AI score0.00707EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•20 views

PT-2026-87232

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An authorized attacker can disclose sensitive information over a network due to the generation of error messages that contain sensitive data. Recommendations At the moment, there is no...

6.5CVSS5.8AI score0.00995EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•32 views

PT-2026-87349

Name of the Vulnerable Software and Affected Versions Push Message Routing Service affected versions not specified Description An out-of-bounds read exists in the Push Message Routing Service, which allows an authorized attacker to disclose sensitive information locally and affect the system. An...

5.5CVSS5.7AI score0.00404EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-83997: Use After Free

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

8.1CVSS8.1AI score0.00707EPSS
SaveExploits0References3
Rows per page
Query Builder