Lucene search
+L

262964 matches found

Cvelist
Cvelist
added 2026/07/28 5:58 p.m.33 views

CVE-2026-48393 Bridge | Out-of-bounds Write (CWE-787)

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00148EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/28 5:58 p.m.5 views

EUVD-2026-49944

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.4AI score0.00148EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/28 5:58 p.m.33 views

CVE-2026-48396 Bridge | Incorrect Authorization (CWE-863)

Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open ...

8.6CVSS0.0016EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/28 5:58 p.m.7 views

EUVD-2026-49943

Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open ...

8.6CVSS6.6AI score0.0016EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/28 5:58 p.m.10 views

CVE-2026-48396

CVE-2026-48396 refers to an Incorrect Authorization vulnerability in the Bridge product (Bridge/Adobe Bridge). The issue could allow arbitrary code execution in the context of the current user . Exploitation requires user interaction, as a victim must open a malicious file. The CVSS v3.1 metrics ...

8.6CVSS6.6AI score0.0016EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/07/28 5:57 p.m.69 views

CVE-2026-16496

The CVE concerns terraform-mcp-server prior to version 1.1.0, where an authorization bypass in the streamable-HTTP stateful transport mode could allow a user who obtains another user’s MCP session ID to execute tool calls using that user’s Terraform credentials. Affected component: terraform-mcp-...

8.9CVSS5.9AI score0.00273EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/28 5:57 p.m.58 views

CVE-2026-16496 terraform-mcp-server vulnerable to cross-user credential inheritance if an MCP session ID is obtained by another user

The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful transport mode that may allow a user who obtains another user's MCP session ID to have their tool calls executed using that user's Terraform credentials. This vulnerability,...

8.9CVSS0.00273EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/28 5:56 p.m.31 views

CVE-2026-47725 nebula-mesh: Web UI lacks CSRF tokens on /ui/* mutating endpoints

nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.3, every /ui/ POST / PUT / PATCH / DELETE route processes the request as soon as the session cookie validates. SameSite=Lax on the session cookie prevents most cross-site form submits bu...

6.9CVSS0.00154EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/28 5:56 p.m.43 views

CVE-2026-47725

Summary (CVE-2026-47725) Nebula-mesh web UI lacked CSRF protection on all /ui/* mutating endpoints (POST/PUT/PATCH/DELETE) prior to v0.3.3. A session-cookie/Lax-SameSite boundary and third-party page triggers (including a forced GET /ui/logout via an image tag) enable potential privilege escalati...

6.9CVSS5.7AI score0.00154EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/28 5:55 p.m.10 views

EUVD-2026-49938

A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. The condition is reachable during normal replication operation, including by a...

7.7CVSS6.5AI score0.00301EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/28 5:51 p.m.5 views

EUVD-2026-49933

Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.4AI score0.00186EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/28 5:51 p.m.37 views

CVE-2026-48372 Format Plugins | Heap-based Buffer Overflow (CWE-122)

Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00186EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/28 5:51 p.m.38 views

CVE-2026-48372

Format Plugins (Adobe) suffers a heap-based buffer overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). A security update (Adobe APSB26-87) addresses critical vulnerabilities in Format Pl...

7.8CVSS6.4AI score0.00186EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/07/28 5:46 p.m.33 views

CVE-2026-48388 Photoshop Installer | CWE-427: Uncontrolled Search Path Element

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the...

8.6CVSS0.00173EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/28 5:46 p.m.30 views

CVE-2026-48388

Adobe Photoshop Installer is affected by an Uncontrolled Search Path Element vulnerability. An attacker could achieve arbitrary code execution in the context of the current user by placing a malicious library in a directory that the installer searches. Exploitation requires user interaction, with...

8.6CVSS6.4AI score0.00173EPSS
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2026/07/28 5:20 p.m.5 views

SUSE CVE-2026-17523

A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged local user can exploit this vulnerability to execute arbitrary code within the kernel, which leads to a local privilege escalation LPE. This allows the attacker to gain root privileges and take full control o...

7.8CVSS5.9AI score0.00119EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/28 5:16 p.m.8 views

CVE-2026-54609

QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0, the relay's handleReconnectRequest forwards RECONNECTREQUEST packets to the host without bounding them, so an unauthenticated client can drive relay-to-host amplification and cause a denial of...

8.6CVSS0.00263EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/28 4:20 p.m.10 views

CVE-2026-7775

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 is vulnerable to stored cross-site scripting. This vulnerability allows a...

5.5CVSS0.00142EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/28 4:19 p.m.10 views

CVE-2026-54593

Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2, the Wings /upload/file endpoint accepted any valid panel-signed JWT that contained serveruuid, useruuid, and uniqueid claims without checking the token's intended purpose;...

8.1CVSS0.00357EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/28 4:1 p.m.40 views

CVE-2026-7775 Cross-site Scripting Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 is vulnerable to stored cross-site scripting. This vulnerability allows a...

5.5CVSS0.00142EPSS
SaveExploits0References1
Rows per page
Query Builder