Lucene search
+L

156304 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•10 views

CVE-2026-73594: Improper Certificate Validation

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...

6.4CVSS5.9AI score0.00082EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•7 views

CVE-2026-95305: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

4.8CVSS5.9AI score0.00264EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/29 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-54160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. Prior to commits...

8.2CVSS5.8AI score0.00198EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•5 views

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95376): chromium -- security fixes

Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

8CVSS5.9AI score0.00201EPSS
SaveExploits1References2
Redos
Redos
•added 2026/09/29 12:00 a.m.•12 views

ROS-20260929-73-0041

The vulnerability of the aqringrxclean function in the drivers/net/ethernet/aquantia/atlantic/aqring.c module of the Ethernet network adapter driver for the AQuantia Atlantic chipset in the Linux operating system is related to buffer out-of-buffer writing. Exploiting this vulnerability could allo...

9.8CVSS6.8AI score0.00467EPSS
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/09/29 12:00 a.m.•12 views

When Cyber Scoring Systems Diverge: An Empirical Comparison

Vulnerability scoring systems underpin cyber patch prioritization and risk management, but their comparative behavior is almost always assessed in the abstract, through correlation studies in IT vulnerability databases, rather than by the operational consequences they produce when embedded in a...

5.8AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•7 views

CVE-2026-100289: Missing Authorization

Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to generate a network scan token and perform internal network discovery and port scanning through the gateway via a crafted API request...

5CVSS5.9AI score0.00162EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•9 views

CVE-2026-95394: Unchecked Input for Loop Condition

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

4.7CVSS5.7AI score0.00132EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•11 views

CVE-2026-102762: Missing Release of Memory after Effective Lifetime

The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the network driver's receive pool, and nothing returns it. A peer that can deliver a few dozen such messages exhausts the pool and stops all inbou...

8.2CVSS5.8AI score0.00207EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•6 views

CVE-2026-95376: Externally Controlled Reference to a Resource in Another Sphere

Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

8CVSS5.9AI score0.00201EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•8 views

CVE-2026-102240: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file /www/cgi-bin/networktools of the component Network Tools CGI. The manipulation of the argument sid results in os command injection. The attack may be performed from remote. The exploit has be...

10CVSS5.8AI score0.02011EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•9 views

Wireshark : CVE-2026-95394 : Microsoft Network Monitor file parser large loop

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

4.7CVSS5.7AI score0.00132EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/09/29 12:00 a.m.•14 views

CVE-2026-95394

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

4.7CVSS5.7AI score0.00132EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•8 views

CVE-2026-95346: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted network traffic. Chromium security severity: Medium...

4.8CVSS6AI score0.00302EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/09/29 12:00 a.m.•7 views

PT-2026-102669

Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to generate a network scan token and perform internal network discovery and port scanning through the gateway via a crafted API request...

5CVSS5.9AI score0.00162EPSS
SaveExploits0References2
Redos
Redos
•added 2026/09/29 12:00 a.m.•12 views

ROS-20260929-73-0203

The vulnerability of the otx2setringparam function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2ethtool.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system is related to buffer-overflow attacks. Exploiting this vulnerability could allow an attacker ...

7.8CVSS6.9AI score0.00188EPSS
SaveExploits0
Redos
Redos
•added 2026/09/29 12:00 a.m.•16 views

ROS-20260929-73-0173

The vulnerability of the e1000tbishouldaccept function in the drivers/net/ethernet/intel/e1000/e1000main.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker ...

9.1CVSS6.7AI score0.00293EPSS
SaveExploits0
Redos
Redos
•added 2026/09/29 12:00 a.m.•14 views

ROS-20260929-73-0170

The vulnerability of the iavfconfigrssreg function in the driver/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

5.5CVSS7AI score0.00137EPSS
SaveExploits0
Redos
Redos
•added 2026/09/29 12:00 a.m.•22 views

ROS-20260929-73-0184

The vulnerability of the hclgesetvlanfilter function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclgemain.c file of the Ethernet network adapter driver for the Hisilicon-based Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacke...

8.8CVSS7.1AI score0.00155EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•6 views

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95341): chromium -- security fixes

Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

8.3CVSS6.9AI score0.00399EPSS
SaveExploits0References2
Rows per page
Query Builder