Lucene search
+L

9123 matches found

Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.6 views

Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability

Improper access control in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00221EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.8 views

Windows UPnP Device Host Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00321EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.9 views

Windows UPnP Device Host Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.0024EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.6 views

Windows UPnP Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.0024EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.5 views

Windows UPnP Device Host Information Disclosure Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to disclose information over an adjacent network...

6.5CVSS6.2AI score0.0036EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.7 views

Windows UPnP Device Host Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00298EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.4 views

Windows UPnP Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00298EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.6 views

Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...

5.5CVSS6.2AI score0.00307EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.6 views

Windows UPnP Device Host Remote Code Execution Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute code locally...

7.4CVSS6.4AI score0.00286EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.10 views

Windows UPnP Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00268EPSS
SaveExploits0
EUVD
EUVD
added 2026/04/14 12:31 a.m.12 views

EUVD-2026-22095

An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain UniFi Play WiFi credentials. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Port Version 1.0.24 and earlier Mitigation: Update UniFi Play...

7.5CVSS5.8AI score0.00361EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/14 12:31 a.m.8 views

EUVD-2026-22091

A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write files on the system that could be used for a remote code execution RCE. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Por...

9.8CVSS6.4AI score0.00774EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/14 12:31 a.m.7 views

EUVD-2026-22093

An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthorized changes to the system. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Port Version 1.0.24 and earlier Mitigation:...

9.8CVSS5.8AI score0.0042EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/14 12:31 a.m.7 views

EUVD-2026-22094

An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop responding. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Port Version 1.0.24 and earlier Mitigation: Update UniFi Play...

5.8AI score0.00432EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/14 12:31 a.m.9 views

EUVD-2026-22092

A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Port Version 1.0.24 and earlier Mitigation: Update UniFi Play...

9.8CVSS5.8AI score0.01051EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.5 views

PT-2026-32826

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use after free in the Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute arbitrary code locally and remotely, affecting the system. Use after free i...

7.4CVSS6.6AI score0.00286EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.10 views

PT-2026-32781

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP Device Host affected versions not specified Description An untrusted pointer dereference in the Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally,...

7.8CVSS6.2AI score0.00298EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.5 views

PT-2026-32803

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP Device Host affected versions not specified Description An untrusted pointer dereference in the Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00321EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.10 views

Microsoft Windows UPnP 资源管理错误漏洞

Microsoft Windows UPnP is a device proxy provided by the American company Microsoft. It serves as a proxy that allows Windows network connections to recognize the IP address of ZoneDirector. There is a resource management vulnerability in Microsoft Windows UPnP. Attackers can exploit this...

7CVSS5.8AI score0.00268EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.5 views

PT-2026-32857

CVE-2026-32214 Improper access control in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally. https://t.co/mQeTrH15sG...

5.5CVSS6.1AI score0.00221EPSS
SaveExploits0References3
Rows per page
Query Builder