Lucene search
+L

358290 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-97840: Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00734EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-85865: Windows DHCP Server Security Feature Bypass Vulnerability

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally...

5.5CVSS5.7AI score0.00288EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft SQL Server: CVE-2026-88084: Microsoft SQL Server Denial of Service Vulnerability

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network...

5.3CVSS5.8AI score0.00454EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

Microsoft Windows: CVE-2026-70066: Windows DHCP Server Elevation of Privilege Vulnerability

Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.0027EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft SQL Server: CVE-2026-85886: Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

8.5CVSS6.6AI score0.00405EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•9 views

PT-2026-112404

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no...

7.8CVSS5.8AI score0.00304EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

Microsoft Windows: CVE-2026-81969: Windows Server Update Service Elevation of Privilege Vulnerability

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00304EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-83771: Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability

Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network...

8.8CVSS6.3AI score0.00547EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-84013: Windows Telephony Server Elevation of Privilege Vulnerability

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00318EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft SQL Server: CVE-2026-67628: Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

4.9CVSS5.8AI score0.00536EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-83499: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00304EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-104004: NULL Pointer Dereference

MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access...

7.1CVSS5.9AI score0.00235EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-111654

🚨 CVE-2026-104004 MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access...

7.1CVSS5.9AI score0.00235EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•6 views

PT-2026-112935

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An out-of-bounds read occurs in the DNS Server, which allows an authorized attacker to cause a denial of service over a network. An out-of-bounds read is a condition where the software rea...

6.5CVSS5.7AI score0.00791EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•8 views

PT-2026-113434

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about a newer version that...

4.9CVSS5.7AI score0.00536EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft SQL Server: CVE-2026-96956: SQL Server Elevation of Privilege Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

8CVSS7.8AI score0.00423EPSS
SaveExploits0References2
Kaspersky
Kaspersky
•added 2026/10/13 12:00 a.m.•15 views

KLA91344 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote...

8.8CVSS8.4AI score0.00875EPSS
SaveExploits0References32
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•2 views

CVE-2026-96956: Stack-based Buffer Overflow

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

8CVSS7.8AI score0.00423EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/10/13 12:00 a.m.•5 views

Nginx UI Code Execution

The vulnerability of the Nginx UI server’s user interface is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.6AI score0.00333EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft SQL Server: CVE-2026-88085: Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

6.4CVSS6.1AI score0.00191EPSS
SaveExploits0References2
Rows per page
Query Builder