Lucene search
+L

54145 matches found

Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•25 views

PT-2026-87556

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A use after free issue in Active Directory Domain Services allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use...

8.1CVSS7AI score0.00707EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•39 views

PT-2026-88051

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

8.8CVSS7.8AI score0.00913EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•15 views

CVE-2026-69475: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00333EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•14 views

PT-2026-114494

Уязвимость службы развертывания Windows Deployment Services операционных систем Windows связана с использованием памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

7.5CVSS7.3AI score0.00663EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•14 views

CVE-2026-62813: Use After Free

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...

7.5CVSS6.8AI score0.00663EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•22 views

CVE-2026-69595: Use After Free

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network...

9.8CVSS8.9AI score0.00974EPSS
SaveExploits0References3
ICS
ICS
•added 2026/09/08 12:00 a.m.•68 views

Siemens Siveillance Control

SUMMARY A vulnerability has been identified in the Open Interface Services OIS web module affecting Siveillance Control and Siveillance Control Pro versions OIS 3.x.y and OIS 4.x.y . This vulnerability allows an attacker to upload arbitrary files, which can lead to unauthorized root-level access...

9CVSS6.1AI score0.0032EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•12 views

CVE-2026-72957: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

7.8CVSS7.8AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•26 views

CVE-2026-69546: Use After Free

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

8.1CVSS6.8AI score0.00707EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•13 views

CVE-2026-69536: Use After Free

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

7.1CVSS6.8AI score0.0057EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•11 views

CVE-2026-72943: Use After Free

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

7.5CVSS7.9AI score0.00663EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•12 views

CVE-2026-69514: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

7.5CVSS6.7AI score0.00663EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•14 views

CVE-2026-69359: Heap-based Buffer Overflow

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00333EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•29 views

PT-2026-87872

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

7.8CVSS7.8AI score0.00333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•14 views

CVE-2026-73315: Server-Side Request Forgery (SSRF)

XenForo before 2.3.13 contains a server-side request forgery vulnerability in the PayPal REST webhook handler that allows unauthenticated attackers to cause the server to make outbound HTTP requests to arbitrary destinations by supplying a crafted certificate URL in webhook headers without scheme...

8.6CVSS6AI score0.00357EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•16 views

CVE-2026-69616: Out-of-bounds Read

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00404EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•16 views

PT-2026-114493

Уязвимость службы развертывания Windows Deployment Services операционных систем Windows связана с переполнением буфера в динамической памяти. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...

7.8CVSS7.3AI score0.00333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•9 views

CVE-2026-86735: Server-Side Request Forgery (SSRF)

snipe-it versions before 8.7.0 contain a server-side request forgery vulnerability in the ExternalUrl validation rule that fails to detect IPv6 transition addresses encoding private IPv4 targets. Attackers with super-admin privileges can configure webhook URLs using NAT64, 6to4, or Teredo...

5.9CVSS5.9AI score0.00313EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•35 views

PT-2026-87549

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free issue in Windows Remote Desktop Services allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use afte...

7.1CVSS7AI score0.0057EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•19 views

CVE-2026-69607: Use After Free

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

7.5CVSS6.8AI score0.00608EPSS
SaveExploits0References3
Rows per page
Query Builder