Lucene search
+L

5674 matches found

Microsoft CVE
Microsoft CVE
•added 2026/06/09 2:00 p.m.•25 views

Microsoft Windows VMSwitch Denial of Service Vulnerability

Incorrect calculation of buffer size in Windows VMSwitch allows an authorized attacker to deny service locally...

5.5CVSS6.4AI score0.00399EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/06/09 2:00 p.m.•32 views

Microsoft SharePoint Remote Code Execution Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8.8CVSS7AI score0.0152EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/06/09 2:00 p.m.•26 views

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

6.1CVSS6.7AI score0.00601EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/06/09 2:00 p.m.•19 views

Microsoft Exchange Server Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...

8.1CVSS7.5AI score0.00697EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/06/09 2:00 p.m.•41 views

ASP.NET Core Denial of Service Vulnerability

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network...

7.5CVSS7.2AI score0.02444EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•3 views

CVE-2026-47281: Missing Authorization

Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network...

9.6CVSS8.1AI score0.00833EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•25 views

PT-2026-47910

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. A heap-based buffer overflow occurs when a program writes...

10CVSS6AI score0.00819EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•3 views

CVE-2026-45465: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

5.4CVSS6.5AI score0.00589EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•28 views

PT-2026-47952

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

5.4CVSS7.1AI score0.00589EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•4 views

CVE-2026-45504: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

8.8CVSS7.9AI score0.00778EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•37 views

PT-2026-48025

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description An integer overflow or wraparound exists in the Windows HTTP Protocol Stack kernel-mode driver HTTP.sys. The issue occurs during the dynamic expansion of the buffer array in the UL...

10CVSS9.2AI score0.00974EPSS
SaveExploits3References52
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•3 views

CVE-2026-42909: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

7.5CVSS7.6AI score0.00466EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•3 views

CVE-2026-47291: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network...

9.8CVSS8.9AI score0.00974EPSS
SaveExploits3References4
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•44 views

PT-2026-47882

Name of the Vulnerable Software and Affected Versions Windows Kerberos affected versions not specified Description A null pointer dereference in Windows Kerberos allows an authorized attacker to cause a denial of service over a network. A null pointer dereference occurs when a program attempts to...

6.5CVSS6.3AI score0.01138EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•24 views

PT-2026-47907

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An integer underflow wrap or wraparound in Windows Performance Monitor allows an unauthorized attacker to execute code over a network. Integer underflow occurs when an arithmetic...

8.1CVSS5.7AI score0.00707EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•30 views

PT-2026-47902

Name of the Vulnerable Software and Affected Versions Windows Performance Monitor affected versions not specified Description An integer underflow wrap or wraparound in Windows Performance Monitor allows an unauthorized attacker to execute code over a network. This condition can lead to remote co...

8.1CVSS6.6AI score0.00707EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•4 views

CVE-2026-45453: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

5.4CVSS6.5AI score0.00589EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•2 views

CVE-2026-45454: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8.8CVSS7AI score0.0152EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•3 views

CVE-2026-42993: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

7.5CVSS7.8AI score0.00608EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•2 views

CVE-2026-45599: Use After Free

Use after free in Universal Plug and Play upnp.dll allows an unauthorized attacker to execute code over a network...

8.1CVSS8.1AI score0.00707EPSS
SaveExploits0References3
Rows per page
Query Builder