Lucene search
+L

16291 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•5 views

CVE-2026-89173: Observable Response Discrepancy

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...

6.9CVSS5.8AI score0.00436EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•4 views

CVE-2026-89174: Improper Restriction of Excessive Authentication Attempts

Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...

8.7CVSS5.8AI score0.00514EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•24 views

PT-2026-89796

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...

6.9CVSS5.7AI score0.00436EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•25 views

PT-2026-89797

Name of the Vulnerable Software and Affected Versions Smart Video Intercom System affected versions not specified Description Kingdom Communication Associated developed a system that lacks brute-force protection. This allows unauthenticated remote attackers to gain access to valid accounts by...

8.7CVSS5.8AI score0.00514EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-49836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path...

4.6CVSS6AI score0.00192EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•21 views

PT-2026-90595

Name of the Vulnerable Software and Affected Versions Smart Marketing SMS and Newsletters Forms versions prior to 5.1.25 Description This issue is a generic SQL Injection that allows authenticated attackers with subscriber-level access and above to append additional SQL queries to existing ones,...

6.5CVSS5.8AI score0.00451EPSS
SaveExploits0References13
NVD
NVD
•added 2026/09/10 10:16 p.m.•17 views

CVE-2026-49836

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...

4.6CVSS0.00192EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/09/10 10:16 p.m.•15 views

CVE-2026-49836

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...

4.6CVSS5.9AI score0.00192EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/10 9:47 p.m.•47 views

CVE-2026-49836 psd-tools: arbitrary file write via smart-object filename

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...

4.6CVSS0.00192EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/10 9:47 p.m.•53 views

CVE-2026-49836

psd-tools (Python library for Adobe Photoshop PSD files) is vulnerable to arbitrary file write and arbitrary file read via unsanitized smart-object paths. In all releases through v1.17.0 , SmartObject.save() uses the embedded filename from the PSD verbatim—no basename, no .. filtering, no absolut...

4.6CVSS6AI score0.00192EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/09/10 11:47 a.m.•13 views

Security update for opensc

This update for opensc fixes the following issue: CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964. Patch Instructions: To install this SUSE update use the SU...

5.7CVSS6.4AI score0.00254EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/10 11:47 a.m.•5 views

SUSE-SU-2026:4123-1 Security update for opensc

This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...

6.8CVSS6.4AI score0.00254EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
•added 2026/09/10 11:46 a.m.•13 views

Security update for opensc

This update for opensc fixes the following issue: CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964. Patch Instructions: To install this SUSE update use the SU...

5.7CVSS6.4AI score0.00254EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/10 11:46 a.m.•7 views

SUSE-SU-2026:4122-1 Security update for opensc

This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...

6.8CVSS6.4AI score0.00254EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/09/10 3:38 a.m.•25 views

evmpatch-env

evmpatch-env An execution-verified RL environment for repai...

5.8AI score
SaveExploits0
OSV
OSV
•added 2026/09/09 2:07 p.m.•11 views

OPENSUSE-SU-2026:21820-1 Security update for opensc

This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...

6.8CVSS6.4AI score0.00254EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/09 1:45 p.m.•4 views

SUSE-SU-2026:23717-1 Security update for opensc

This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...

6.8CVSS6.4AI score0.00254EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
•added 2026/09/09 1:25 p.m.•12 views

Security update for opensc

This update for opensc fixes the following issue: CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964. Patch Instructions: To install this SUSE update use the SU...

5.7CVSS6.4AI score0.00254EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/09 1:25 p.m.•11 views

SUSE-SU-2026:4108-1 Security update for opensc

This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...

6.8CVSS6.4AI score0.00254EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/08 6:19 p.m.•22 views

CVE-2026-69785

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00457EPSS
SaveExploits0References1
Rows per page
Query Builder