Lucene search
+L

5779 matches found

Positive Technologies
Positive Technologies
•added 2026/01/09 12:00 a.m.•28 views

PT-2026-1999

Name of the Vulnerable Software and Affected Versions Langflow affected versions not specified Description Remote attackers can execute arbitrary code on affected installations without requiring authentication. The issue stems from a lack of proper validation of a user-supplied string within the...

9.8CVSS8.5AI score0.41695EPSS
SaveExploits4References13
Positive Technologies
Positive Technologies
•added 2026/01/09 12:00 a.m.•22 views

PT-2026-1992

Name of the Vulnerable Software and Affected Versions GPT Academic affected versions not specified Description A flaw exists in the stream daas function that allows remote attackers to execute arbitrary code on affected systems. This is due to insufficient validation of user-supplied data, leadin...

8.1CVSS7.9AI score0.00761EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/01/09 12:00 a.m.•31 views

PT-2026-1996

Name of the Vulnerable Software and Affected Versions Open WebUI affected versions not specified Description A flaw exists in the load tool module by id function of Open WebUI that allows remote attackers to execute arbitrary code. Authentication is required for exploitation. The issue stems from...

8.8CVSS8.5AI score0.26035EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/01/09 12:00 a.m.•21 views

PT-2026-2004

Name of the Vulnerable Software and Affected Versions WatchYourLAN affected versions not specified Description A network-adjacent attacker can execute arbitrary code on affected installations of WatchYourLAN without authentication. The issue stems from insufficient validation of user-supplied inp...

8.8CVSS8.4AI score0.00833EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/09 12:00 a.m.•25 views

PT-2026-2019

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the handling of the Replaces header within SIP INVITE requests. The issue stems from insufficient validation of the length of user-supplied data before...

9.8CVSS8.1AI score0.0089EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/01/08 2:27 p.m.•13 views

gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...

7.8CVSS7.8AI score0.00582EPSS
SaveExploits0References6
Talos Blog
Talos Blog
•added 2026/01/07 11:00 a.m.•17 views

How Cisco Talos powers the solutions protecting your organization

Cisco Talos is Cisco's threat intelligence and security research organization that powers Cisco's product portfolio with that intelligence. While we are well known for the security research in our blog, vulnerability discoveries, and our open-source software, you may not be aware of exactly how o...

6.9AI score
SaveExploits0
Circl
Circl
•added 2026/01/05 6:05 p.m.•17 views

CVE-2026-21634

creationtimestamp| type| source ---|---|--- 2026-01-05 18:05:12+00:00| seen| Telegram/QHE3ZGhFyl2T5Z4zPcVefx-4WihQCgoreYtJ2GbiYf5-7cY 2026-02-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-128/...

6.5CVSS6.7AI score0.00431EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/01/05 2:01 a.m.•13 views

gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...

7.8CVSS7.8AI score0.00582EPSS
SaveExploits0References6
GithubExploit
GithubExploit
•added 2026/01/02 5:37 p.m.•186 views

rxerium-templates

rxerium-templates N...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•19 views

PT-2026-25339

GNU inetutils telnetd versions prior to 2.8 Description A buffer overflow exists in the LINEMODE SLC Set Local Characters suboption handler of the telnetd daemon. The issue occurs because the add slc function does not verify if the buffer is full before copying data, leading to an out-of-bounds...

9.8CVSS8.7AI score0.02448EPSS
SaveExploits8References150
CVD
CVD
•added 2026/01/01 12:00 a.m.•13 views

Outlook: undisclosed vulnerability (ZAI-2026-MNC0S6)

Not disclosed. Details are not yet publicly disclosed...

5.3AI score
SaveExploits0
CVD
CVD
•added 2026/01/01 12:00 a.m.•11 views

Suricata: undisclosed vulnerability (ZAI-2026-OV99YS)

Not disclosed. Details are not yet publicly disclosed...

5.3AI score
SaveExploits0
CVD
CVD
•added 2026/01/01 12:00 a.m.•8 views

Redis: undisclosed vulnerability (ZAI-2026-DRZR45)

Not disclosed. Details are not yet publicly disclosed...

5.3AI score
SaveExploits0
CVD
CVD
•added 2026/01/01 12:00 a.m.•9 views

FFmpeg: undisclosed vulnerability (ZAI-2026-GO94IC)

Not disclosed. Details are not yet publicly disclosed...

5.3AI score
SaveExploits0
CVD
CVD
•added 2026/01/01 12:00 a.m.•9 views

GStreamer: undisclosed vulnerability (ZAI-2026-Q7OBHZ)

Not disclosed. Details are not yet publicly disclosed...

5.3AI score
SaveExploits0
CVD
CVD
•added 2026/01/01 12:00 a.m.•9 views

GStreamer: undisclosed vulnerability (ZAI-2026-LT0CQL)

Not disclosed. Details are not yet publicly disclosed...

5.3AI score
SaveExploits0
CVD
CVD
•added 2026/01/01 12:00 a.m.•17 views

GStreamer: undisclosed vulnerability (ZAI-2026-BOKDAU)

Not disclosed. Details are not yet publicly disclosed...

5.3AI score
SaveExploits0
CVD
CVD
•added 2026/01/01 12:00 a.m.•8 views

GStreamer: undisclosed vulnerability (ZAI-2026-R7BT7W)

Not disclosed. Details are not yet publicly disclosed...

5.3AI score
SaveExploits0
CVD
CVD
•added 2026/01/01 12:00 a.m.•13 views

FFmpeg: undisclosed vulnerability (ZAI-2026-EA4CI9)

Not disclosed. Details are not yet publicly disclosed...

5.3AI score
SaveExploits0
Rows per page
Query Builder