Lucene search
+L

5569 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•8 views

CVE-2026-69357: Use After Free

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network...

7.1CVSS6.2AI score0.0057EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•9 views

CVE-2026-70575: NULL Pointer Dereference

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

6.5CVSS5.7AI score0.00954EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•14 views

CVE-2026-80073: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...

6.5CVSS5.7AI score0.00922EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•7 views

CVE-2026-69744: NULL Pointer Dereference

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...

7.5CVSS5.7AI score0.01174EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•21 views

PT-2026-87955

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An out-of-bounds read occurs in the Windows DHCP Server, which allows an unauthorized attacker to cause a denial of service over a network. An out-of-bounds read is a condition...

7.5CVSS7.1AI score0.01174EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•22 views

PT-2026-87267

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A heap-based buffer overflow occurs in the Remote Desktop Client, which allows an unauthorized attacker to execute arbitrary code over a network and affect the system. A...

8.8CVSS7AI score0.00819EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•9 views

CVE-2026-69463: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network...

9.8CVSS8.7AI score0.00974EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•29 views

PT-2026-87697

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A use-after-free condition in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory corruption issue that occurs when an...

7.5CVSS6.1AI score0.0057EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/09/07 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-78132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax. CVE-2026-78132 Note that Nessus relies...

7.5CVSS5.9AI score0.00315EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/07 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-78124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

3.7CVSS5.9AI score0.00194EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/06 12:00 a.m.•9 views

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022342 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0...

4.9CVSS6AI score0.00392EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/03 11:17 p.m.•34 views

CVE-2026-83711

Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...

10CVSS0.00815EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/03 11:17 p.m.•36 views

CVE-2026-80098

Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network...

10CVSS0.00488EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/03 12:00 a.m.•10 views

CVE-2026-70352: Missing Authentication for Critical Function

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network...

10CVSS8.3AI score0.00921EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/03 12:00 a.m.•3 views

CVE-2026-70178: Missing Authorization

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network...

8.8CVSS7.8AI score0.00632EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/03 12:00 a.m.•7 views

CVE-2026-80098: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network...

10CVSS8.2AI score0.00488EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/03 12:00 a.m.•4 views

CVE-2026-62916: Authentication Bypass Using an Alternate Path or Channel

Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network...

9.8CVSS8.2AI score0.00865EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/03 12:00 a.m.•9 views

CVE-2026-83711: Authorization Bypass Through User-Controlled Key

Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...

10CVSS8.2AI score0.00815EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/03 12:00 a.m.•27 views

PT-2026-85311

Name of the Vulnerable Software and Affected Versions Microsoft Fabric affected versions not specified Description Microsoft Fabric contains a flaw where missing authorization allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no informatio...

8.8CVSS7.6AI score0.00632EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/03 12:00 a.m.•6 views

CVE-2026-65818: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...

9.9CVSS7.8AI score0.00632EPSS
SaveExploits0References3
Rows per page
Query Builder