Lucene search
+L

13006 matches found

Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.9 views

PT-2026-70351

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An Incorrect Authorization issue allows for a security feature bypass. An attacker can bypass security measures to obtain limited unauthorized read and write...

7.3CVSS5.3AI score0.00247EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.9 views

PT-2026-70817

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing a limited disruption to availability...

7.6CVSS5.3AI score0.00349EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.19 views

PT-2026-70348

Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. This flaw allows a low-privileged attacker to bypass security features and...

7.7CVSS5.3AI score0.01171EPSS
SaveExploits0References3
Adobe
Adobe
added 2026/08/11 12:00 a.m.73 views

APSB26-111 : Security update available for Content Credentials SDK

Adobe has released security updates for Content Credentials SDK. This update addresses critical and important vulnerabilities that could result in security feature bypass, arbitrary file system write, arbitrary file system read, application denial-of-service, and privilege escalation...

5.5AI score
SaveExploits0Affected Software3
Kaspersky
Kaspersky
added 2026/08/11 12:00 a.m.11 views

KLA91212 Multiple vulnerability in Microsoft System Center

Multiple vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to bypass security restrictions, obtain sensitive information. Original advisories CVE-2026-54123 Exploitation Related products Windows-Defender CVE list CVE-2026-54123 unknown Solution...

5.5CVSS5.4AI score0.00438EPSS
SaveExploits0References3
Kaspersky
Kaspersky
added 2026/08/11 12:00 a.m.14 views

KLA91210 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, perform cross-site scripting attack, spoof user interface. Below is a complete lis...

8.8CVSS6.4AI score0.01324EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.8 views

PT-2026-70390

Name of the Vulnerable Software and Affected Versions Visual Studio Code - Python extension affected versions not specified Description An issue exists where the inclusion of functionality from an untrusted control sphere allows an unauthorized attacker to bypass a security feature locally...

7.8CVSS5.3AI score0.00393EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/08/11 12:00 a.m.12 views

MiracleLinux 9 : jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base (AXSA:2026-1514:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1514:01 advisory. jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution CVE-2026-54513 jackson-databind: jackson-databind: Arbitrary cod...

8.1CVSS6.9AI score0.00892EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/08/10 8:44 p.m.17 views

EUVD-2026-55809

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to...

8.1CVSS6.2AI score0.00417EPSS
SaveExploits0References2
Circl
Circl
added 2026/08/10 7:39 p.m.12 views

GHSA-89XV-2M56-2M9X

creationtimestamp| type| source ---|---|--- 2026-08-10 19:39:38+00:00| seen| https://gist.github.com/klemmanton-lgtm/4a24aedae8017b5aebed0300d07c7ee9 2026-08-10 19:39:38+00:00| seen| https://gist.github.com/klemmanton-lgtm/8b54bdd2fe9905dc89b9c8ccf42f5fc4 2026-08-17 10:21:36+00:00| seen|...

4.9AI score
SaveExploits0References3
NVD
NVD
added 2026/08/10 6:17 p.m.13 views

CVE-2026-10754

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls...

8.6CVSS0.00574EPSS
SaveExploits0References1
Circl
Circl
added 2026/08/10 5:18 p.m.12 views

GHSA-Q67Q-549Q-P849

creationtimestamp| type| source ---|---|--- 2026-08-10 17:18:10+00:00| seen| https://gist.github.com/haidang-infosec/402db84bee7aca2f57bb109b31574649...

4.9AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/08/10 4:56 p.m.12 views

openjdk: Improve certification checking (Oracle CPU 2026-07)

A flaw was found in OpenJDK. OpenJDK can apply two different security meanings to the same wildcard dNSName SAN across certificate policy enforcement and hostname verification. During path validation, DNSName.constrains compares .foo.com and secret.foo.com literally and returns NAMESAMETYPE, so...

6.5CVSS7.2AI score0.00287EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/10 3:48 p.m.66 views

CVE-2026-72721

Findings: CVE-2026-72721 affects Discourse prior to versions 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0. The root cause is a case-sensitive comparison in Onebox::DomainChecker.is_blocked?, which compares hostnames and SiteSetting.blocked_onebox_domains entries. This allows an attacker to bypass c...

5.3CVSS5.3AI score0.00429EPSS
SaveExploits0References9
OSV
OSV
added 2026/08/10 1:20 p.m.9 views

UBUNTU-CVE-2026-68267

In the Linux kernel, the following vulnerability has been resolved: drm/xe/rtp: Add RINGFORCETONONPRIVDENY to OA whitelists Unconditionally whitelisting OA registers is a security violation. Set RINGFORCETONONPRIVDENY bit in OA nonpriv slots, so that OA registers don't get whitelisted by default...

5.2AI score0.00168EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/07 9:17 p.m.14 views

CVE-2026-71381

Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this...

4CVSS0.00158EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/07 8:26 p.m.35 views

CVE-2026-71381 Adobe Genuine Software Integrity Service | CWE-863 Incorrect Authorization

Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this...

4CVSS0.00158EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/07 8:26 p.m.9 views

CVE-2026-71381

Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this...

4CVSS5.5AI score0.00158EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/07 8:26 p.m.92 views

CVE-2026-71381

The CVE-2026-71381 entry concerns the Adobe Genuine Software Integrity Service and an Incorrect Authorization flaw that could bypass security features, enabling an attacker with local access to obtain unauthorized limited write capabilities. The advisory notes no user interaction is required, whi...

4CVSS5.5AI score0.00158EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/07 8:26 p.m.18 views

CVE-2026-71381 Adobe Genuine Software Integrity Service | CWE-863 Incorrect Authorization

Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this...

4CVSS5.5AI score0.00158EPSS
SaveExploits0References1
Rows per page
Query Builder