Lucene search
+L

443 matches found

NVD
NVD
•added 2026/11/12 8:18 p.m.•14 views

CVE-2026-47257

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. In versions 1.5.0 and 1.6.0-rc1, there is a restore logic flaw in bacnet-stack that is reachable through the official, unmodified apps/server management path when BACNETBACKUPRESTORE is enabled. This issue has bee...

8.1CVSS0.00393EPSS
SaveExploits0References2
CVE
CVE
•added 2026/11/12 8:01 p.m.•14 views

CVE-2026-47257

The BACnet Stack C library for embedded systems contains a restore logic flaw in versions 1.5.0 and 1.6.0-rc1 . This vulnerability is reachable through the official, unmodified apps/server management path when the BACNET_BACKUP_RESTORE option is enabled. Specifically, the ReinitializeDevice ENDRE...

8.1CVSS5.8AI score0.00393EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/11/12 8:01 p.m.•6 views

CVE-2026-47257 BACnet Stack: ReinitializeDevice ENDRESTORE can delete existing objects on an empty restore file and still return success

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. In versions 1.5.0 and 1.6.0-rc1, there is a restore logic flaw in bacnet-stack that is reachable through the official, unmodified apps/server management path when BACNETBACKUPRESTORE is enabled. This issue has bee...

8.1CVSS5.9AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/11/12 8:01 p.m.•6 views

EUVD-2026-124663

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. In versions 1.5.0 and 1.6.0-rc1, there is a restore logic flaw in bacnet-stack that is reachable through the official, unmodified apps/server management path when BACNETBACKUPRESTORE is enabled. This issue has bee...

8.1CVSS5.8AI score0.00393EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/11/12 10:13 a.m.•32 views

CloudPanel-CVE-2023-33747

CloudPanel-CVE-2023-33747...

7.8CVSS7.6AI score0.00469EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/11/12 12:56 a.m.•36 views

CVE-2024-54085

CVE-2024-54085: Critical Authentication Bypass Vulnerability in AMI MegaRAC BMC Affected Systems The vulnerability affects a wide range of server hardware from major manufacturers: AMI MegaRAC SPx : versions 12.x up to 12.7 and 13.x up to 13.5 HPE Cray XD670 : versions 1.09, 1.13, 1.17 Asus...

10CVSS7.4AI score0.60747EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/11/12 12:00 a.m.•2 views

PT-2026-146043

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. In versions 1.5.0 and 1.6.0-rc1, there is a restore logic flaw in bacnet-stack that is reachable through the official, unmodified apps/server management path when BACNET BACKUP RESTORE is enabled. This issue has...

8.1CVSS5.9AI score0.00393EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/12 12:00 a.m.•6 views

CVE-2026-47257: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. In versions 1.5.0 and 1.6.0-rc1, there is a restore logic flaw in bacnet-stack that is reachable through the official, unmodified apps/server management path when BACNETBACKUPRESTORE is enabled. This issue has bee...

8.1CVSS5.9AI score0.00393EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/10/19 12:00 a.m.•16 views

SQL Server Management Studio Code Execution

The vulnerability of the SQL Server Management Studio SSMS and the Visual Studio Tools for Applications VSTA environment used in Microsoft Visual Studio development tools is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary co...

10CVSS7.5AI score0.00994EPSS
SaveExploits0References2Affected Software2
NVD
NVD
•added 2026/10/13 7:17 p.m.•24 views

CVE-2026-103572

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

8.8CVSS0.00994EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/13 6:56 p.m.•23 views

EUVD-2026-99027

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

8.8CVSS8.2AI score0.00994EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 6:56 p.m.•107 views

CVE-2026-103572

A code injection vulnerability exists in Visual Studio Tools for Applications and SQL Server Management Studio . Due to improper control of code generation, an unauthorized attacker can execute arbitrary code over a network. This vulnerability has a CVSS 3.1 score of 8.8 and is reported to have a...

8.8CVSS8.2AI score0.00994EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•29 views

Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

8.8CVSS8.2AI score0.00994EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•15 views

PT-2026-118111

Уязвимость среды для администрирования баз данных SQL Server Management Studio SSMS и набора инструментов Visual Studio Tools for Applications VSTA средства разработки программного обеспечения Microsoft Visual Studio связана с неверным управлением генерацией кода. Эксплуатация уязвимости может...

10CVSS8AI score0.00994EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•28 views

PT-2026-111805

Name of the Vulnerable Software and Affected Versions Visual Studio Tools for Applications affected versions not specified SQL Server Management Studio affected versions not specified Visual Studio Copilot extension affected versions not specified Description Improper control of code generation...

10CVSS8.7AI score0.00994EPSS
SaveExploits0References24
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•15 views

CVE-2026-103572: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

8.8CVSS8.2AI score0.00994EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•22 views

Microsoft Visual Studio: CVE-2026-103572: Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

8.8CVSS8.2AI score0.00994EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/11 8:48 p.m.•33 views

mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. Bajo los términos del Contrato DE-NA0003525 con NTESS, el Gobierno de los EE. UU. retiene ciertos derechos sobre este software. MOSE es una herramienta de post-explotación que ayuda a los...

6.4AI score
SaveExploits0References13
NVD
NVD
•added 2026/10/08 3:16 a.m.•34 views

CVE-2026-87686

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socke...

5.3CVSS0.00176EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/08 2:31 a.m.•14 views

CVE-2026-87686

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socke...

5.3CVSS5.8AI score0.00176EPSS
SaveExploits0References1
Rows per page
Query Builder