Lucene search
+L

162554 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

Microsoft Windows: CVE-2026-70005: Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

5.9CVSS5.8AI score0.00628EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-112155

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...

5.9CVSS5.8AI score0.00628EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-112145

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

7.5CVSS6.7AI score0.00631EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•10 views

PT-2026-113113

Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.01125EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

Microsoft Windows: CVE-2026-83511: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

7.4CVSS5.8AI score0.00652EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•9 views

PT-2026-112413

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to perform spoofing over a network, which enables them to affect the system. Recommendations At the moment,...

7.4CVSS5.8AI score0.00652EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•18 views

Microsoft Windows: CVE-2026-70143: Windows Network File System Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally...

7.8CVSS6.5AI score0.00379EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•11 views

PT-2026-112252

Name of the Vulnerable Software and Affected Versions Windows Network File System affected versions not specified Description A heap-based buffer overflow occurs in the Windows Network File System, which allows an authorized attacker to execute code locally. Additionally, remote attackers may be...

7.8CVSS6.8AI score0.00379EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•10 views

PT-2026-112268

Name of the Vulnerable Software and Affected Versions OpenSSH for Windows affected versions not specified Description An issue exists where resources are allocated without limits or throttling, which allows an unauthorized attacker to cause a denial of service over a network through resource...

7.5CVSS5.7AI score0.01225EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•12 views

PT-2026-112298

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Server-side request forgery SSRF allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where a server is tricked into making requests to an...

7.5CVSS5.8AI score0.00573EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•15 views

Microsoft Windows: CVE-2026-69802: Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability

Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...

8.1CVSS7.9AI score0.00627EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•14 views

Microsoft Windows: CVE-2026-102192: Windows Failover Cluster Denial of Service Vulnerability

Integer underflow wrap or wraparound in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.01273EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

Microsoft Windows: CVE-2026-85798: Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...

7.2CVSS6.6AI score0.00869EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-111127

Name of the Vulnerable Software and Affected Versions SAP Cloud Connector affected versions not specified Description An improper authorization check allows a low-privileged attacker on an adjacent network to obtain limited information about internal systems by sending specially crafted requests...

3.5CVSS5.8AI score0.00157EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-113177

Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

8.8CVSS8.2AI score0.0082EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

Microsoft Windows: CVE-2026-70210: Windows OLE DB Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network...

8.8CVSS6.2AI score0.00928EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

CVE-2026-105010: Use After Free

Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network...

9.8CVSS6.5AI score0.00989EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-88206: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

7.5CVSS5.8AI score0.00573EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

CVE-2026-83578: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows PowerShell allows an unauthorized attacker to execute code over a network...

9.8CVSS6.3AI score0.01062EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-97011: Use of Uninitialized Resource

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

8.8CVSS6.2AI score0.00841EPSS
SaveExploits0References4
Rows per page
Query Builder