Lucene search
+L

5700 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•4 views

CVE-2026-58535: Use of Uninitialized Resource

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.8AI score0.00922EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•37 views

PT-2026-58123

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Bluetooth Port Driver. This issue allows an unauthorized attacker located on an adjacent network to execute arbitrary code and...

8.8CVSS6.5AI score0.00536EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•4 views

CVE-2026-57102: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.8CVSS5.9AI score0.00819EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•24 views

PT-2026-58623

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00792EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•9 views

CVE-2026-50682: Out-of-bounds Read

Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network...

7.1CVSS5.8AI score0.0093EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•35 views

PT-2026-58362

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description A heap-based buffer overflow occurs in Windows GDI+, which is a graphics API used for rendering images and shapes. This flaw allows an unauthorized remote attacker to execute arbitrary...

10CVSS8.7AI score0.00819EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•3 views

CVE-2026-50528: Incorrect Authorization

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network...

8.2CVSS7.6AI score0.00609EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•9 views

CVE-2026-50328: Uncaught Exception

Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...

7.5CVSS7.3AI score0.01232EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•29 views

PT-2026-58206

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

7.5CVSS5.9AI score0.01174EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•35 views

PT-2026-58644

Name of the Vulnerable Software and Affected Versions Windows SMB affected versions not specified Description A race condition occurs in Windows SMB when shared resources are executed concurrently with improper synchronization. This allows an authorized attacker to elevate privileges over a...

7.5CVSS7.1AI score0.00509EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•9 views

CVE-2026-55008: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

9.6CVSS5.8AI score0.00863EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•11 views

CVE-2026-50379: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Media allows an authorized attacker to elevate privileges over a network...

7.5CVSS5.9AI score0.00509EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•16 views

CVE-2026-57976: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

6.5CVSS5.7AI score0.01138EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•4 views

CVE-2026-55020: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

5.4CVSS5.6AI score0.00583EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•2 views

CVE-2026-50369: Use After Free

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

8.8CVSS8.2AI score0.00701EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•3 views

CVE-2026-57090: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

9.8CVSS8.3AI score0.00819EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•43 views

PT-2026-58159

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description An issue exists in Windows HTTP.sys where resources are allocated without limits or throttling. This allows an unauthorized attacker to cause a denial-of-service condition over a...

7.8CVSS7.1AI score0.01174EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•38 views

PT-2026-58714

Name of the Vulnerable Software and Affected Versions .NET versions 8 through 10 .NET Framework affected versions not specified Description An issue exists where resources are allocated without limits or throttling, allowing an unauthenticated attacker to drain system resources over a network and...

8.2CVSS7.2AI score0.01174EPSS
SaveExploits0References115
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•36 views

PT-2026-58262

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description Resource allocation without limits or throttling allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment, there is no information about...

8.8CVSS7.2AI score0.01174EPSS
SaveExploits0References99
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•37 views

PT-2026-58806

Name of the Vulnerable Software and Affected Versions .NET versions prior to 8.0.29 .NET versions prior to 9.0.18 .NET versions prior to 10.0.10 Description An issue exists where the allocation of resources occurs without limits or throttling, allowing an unauthorized attacker to cause a denial o...

7.8CVSS7AI score0.01174EPSS
SaveExploits0References113
Rows per page
Query Builder