Lucene search
+L

981612 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2026/08/20 12:00 a.m.14 views

TrueConf Server Missing Authentication for Critical Function Vulnerability

TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script...

9.8CVSS5.8AI score0.00785EPSS
SaveIn wildExploits1
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.7 views

PT-2026-79224

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

8.1CVSS6.6AI score0.00613EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.4 views

PT-2026-79240

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass security restrictions due to improper limitation of a pathname to a restricted directory...

4.8CVSS5.4AI score0.00354EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.9 views

PT-2026-79039

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=save category. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.7 views

PT-2026-79199

Improper neutralization of argument delimiters in a command 'argument injection' in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network...

10CVSS5.5AI score0.00578EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.12 views

PT-2026-79037

A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save menu. The manipulation of the argument img leads to unrestricted upload. The attack is possible to be carried out remotely. T...

5.8CVSS5AI score0.00227EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.9 views

PT-2026-79038

A security flaw has been discovered in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/view order.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released...

7.3CVSS7.2AI score0.00263EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.7 views

PT-2026-79254

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart...

7.5CVSS5.3AI score0.01465EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.11 views

PT-2026-79113

An unauthenticated remote peer can crash any NIOWebSocket-based server including Vapor and Hummingbird with a single 11-byte frame sent after a completed WebSocket handshake, dropping all active connections until the process restarts. This vulnerability is addressed in swift-nio version 2.101.0...

5.3CVSS5.3AI score0.00285EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.9 views

PT-2026-79181

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a buffer overflow...

5.3CVSS5.9AI score0.00487EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.11 views

PT-2026-79131

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

5.9AI score0.00498EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.9 views

PT-2026-79244

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read...

7.9CVSS5.4AI score0.00195EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/20 12:00 a.m.5 views

UBUNTU-CVE-2026-76218

GitPython before 3.1.58 contains a remote code execution vulnerability...

7.7CVSS6.3AI score0.00492EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.15 views

PT-2026-79249

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

9.9CVSS5.9AI score0.00776EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-75143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader libavformat/librist.c. libristread ignored its size argument and copied...

9.8CVSS5.8AI score0.00405EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-76217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply...

7.1CVSS5.7AI score0.00281EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.8 views

JetBrains IntelliJ IDEA < 2026.2.1 Multiple Vulnerabilities

The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2026.2.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains IntelliJ IDEA before 2026.2.1 RCE via Markdown export tool was possible. CVE-2026-75056 - In JetBrains IntelliJ IDEA before 2026.2.1 SSR...

7.8CVSS5.4AI score0.00182EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2026/08/20 12:00 a.m.10 views

The vulnerability of the PostgreSQL database management system, related to errors in data type mixing, allows a hacker to execute arbitrary code.

The vulnerability of the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS6AI score0.00604EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/20 12:00 a.m.9 views

The vulnerability of the PostgreSQL database management system, related to errors in data type mixing, allows a hacker to execute arbitrary code.

The vulnerability of the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS6AI score0.00604EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/20 12:00 a.m.9 views

The vulnerability of the logical decoding mechanism of the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the logical decoding mechanism in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS6AI score0.00513EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder