Lucene search
K

16 matches found

Positive Technologies
Positive Technologies
added yesterday4 views

PT-2026-49013

Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file with .NET metadata may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast...

7.8CVSS5.7AI score
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/06/05 7:13 p.m.5 views

CVE-2026-40619

A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to the main server to access the Server Admin credentials. A third party hired by Genetec found the issue. There is currently no evidence of...

7.8CVSS5.2AI score0.00015EPSS
Exploits0References1
EUVD
EUVD
added 2026/06/02 2:37 p.m.8 views

EUVD-2026-33946

A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to the main server to access the Server Admin credentials. A third party hired by Genetec found the issue. There is currently no evidence of...

7.8CVSS5.7AI score0.00015EPSS
Exploits0References1
CVE
CVE
added 2026/06/02 2:37 p.m.12 views

CVE-2026-40619

CVE-2026-40619 affects Genetec Security Center main server installations. The issue could allow an attacker with local OS privileges on the main server to access the Server Admin credentials . It is tied to specific installation package builds, not just the product version, with vulnerable and re...

7.8CVSS5.7AI score0.00015EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/06/02 2:37 p.m.31 views

CVE-2026-40619

A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to the main server to access the Server Admin credentials. A third party hired by Genetec found the issue. There is currently no evidence of...

7.8CVSS0.00015EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/02 2:37 p.m.5 views

CVE-2026-40619

A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to the main server to access the Server Admin credentials. A third party hired by Genetec found the issue. There is currently no evidence of...

7.8CVSS5.7AI score0.00015EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/02 2:37 p.m.7 views

CVE-2026-40619

A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to the main server to access the Server Admin credentials. A third party hired by Genetec found the issue. There is currently no evidence of...

7.8CVSS5.7AI score0.00015EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/06/02 12:0 a.m.8 views

PT-2026-45778

A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to the main server to access the Server Admin credentials. A third party hired by Genetec found the issue. There is currently no evidence of...

7.8CVSS5.7AI score0.00015EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/03 12:0 a.m.3 views

TP-Link Archer AX53 安全漏洞

The TP-Link Archer AX53 is a dual-core router produced by TP-Link Corporation. The TP-Link Archer AX53 v1.0 1.3.1 Build 20241120 and earlier versions have a security vulnerability. This vulnerability stems from a heap buffer overflow in the tmpserver module, which may lead to segmentation...

8CVSS6.2AI score0.00028EPSS
Exploits0References5
VulnCheck KEV
VulnCheck KEV
added 2025/07/23 12:0 a.m.1 views

VulnCheck KEV: CVE-2025-34163

Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that fails to enforce proper file type validation and access control. An attacker can upload arbitrary files, including executable scripts such as .ashx, via a crafted multipart/form-data POST reques...

10CVSS6.6AI score0.01234EPSS
In wildExploits0References3
NVD
NVD
added 2023/12/29 10:15 a.m.10 views

CVE-2023-4466

A vulnerability has been found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Web Interface. The manipulation leads to protection mechanism failure. The attack can be launched remotely. Th...

4.9CVSS0.00106EPSS
Exploits0References5
OSV
OSV
added 2022/07/14 8:15 p.m.1 views

UBUNTU-CVE-2022-31156

Gradle is a build tool. Dependency verification is a security feature in Gradle Build Tool that was introduced to allow validation of external dependencies either through their checksum or cryptographic signatures. In versions 6.2 through 7.4.2, there are some cases in which Gradle may skip that...

6.6CVSS5.9AI score0.00193EPSS
Exploits0References4
OSV
OSV
added 2020/10/01 7:15 p.m.2 views

CVE-2020-15533

In Zoho ManageEngine Application Manager 14.7 Build 14730 before 14684, and between 14689 and 14750, the AlarmEscalation module is vulnerable to unauthenticated SQL Injection attack...

9.8CVSS7.4AI score0.11446EPSS
Exploits0References3
Exploit DB
Exploit DB
added 2015/09/17 12:0 a.m.73 views

Microsoft Windows - Font Driver Buffer Overflow (MS15-078) (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class Metasploit3 'MS15-078 Microsoft Windows Font Driver Buffer Overflow',...

7.6AI score
Exploits0
Exploit DB
Exploit DB
added 2015/06/24 12:0 a.m.253 views

Microsoft Windows - ClientCopyImage Win32k (MS15-051) (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class Metasploit3 'Windows ClientCopyImage Win32k Exploit', 'Description' = %q Thi...

7.8CVSS7.8AI score0.90429EPSS
Exploits38
0day.today
0day.today
added 2015/06/23 12:0 a.m.73 views

Microsoft Windows ClientCopyImage Improper Object Handling Exploit

This Metasploit module exploits improper object handling in the win32k.sys kernel mode driver. This Metasploit module has been tested on vulnerable builds of Windows 7 x64 and x86, and Windows 2008 R2 SP1 x64. This module requires Metasploit: http://metasploit.com/download Current source:...

7.2CVSS7.6AI score0.90429EPSS
Exploits38
Rows per page
Query Builder