Lucene search
+L

17156 matches found

Zero Day Initiative
Zero Day Initiative
added 2026/07/08 12:00 a.m.8 views

(0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloadBlob function. The issue results from the lack of proper validation of...

7.5CVSS7.3AI score0.00715EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.5 views

FlowiseAI Flowise CSV Agent customReadCSV Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the run method of the CSVAgents clas...

8.8CVSS6.8AI score0.0145EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.7 views

Oracle PeopleSoft HttpListeningConnector Server-Side Request Forgery Vulnerability

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Oracle PeopleSoft. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpListeningConnector class. The issue results from the lack of...

9.3CVSS8.2AI score0.95473EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.7 views

Fuji Electric Tellus pcid64 Driver Registry APIs Exposed Dangerous Method Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Fuji Electric Tellus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the pcid64...

7.8CVSS7.3AI score0.00146EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.10 views

Adobe Acrobat Reader DC Field signatureInfo Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS7.8AI score0.00222EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.8 views

Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of...

8.8CVSS8.4AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.8 views

Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of...

8.8CVSS8.3AI score0.0549EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.6 views

X.Org Server Font Alias Stack-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within font alias resolution...

7.8CVSS7.8AI score0.00157EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.7 views

ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of ATEN Unizon. Authentication is not required to exploit this vulnerability. The specific flaw exists within the writeFileToHttpServletResponse method. The issue results from the lack of proper...

7.5CVSS7.2AI score0.01851EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.7 views

MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MosaicML Composer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.8AI score0.00547EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.6 views

X.Org Server miSyncDestroyFence Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of SyncAwa...

7.8CVSS7.7AI score0.00142EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.8 views

Docker MCP Plugin OCI Image Label Parsing Argument Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Docker MCP Plugin. User interaction is required to exploit this vulnerability in that the target must reference a malicious Docker image via a docker URI scheme. The specific flaw exists within the...

8.6CVSS8.7AI score0.00199EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.9 views

Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is required to exploit this vulnerability. The specific flaw exists within FileUpload.php. The issue results from the lack of proper validation of a user-supplied string before...

8.8CVSS8.3AI score0.01888EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.6 views

X.Org Server Xkb Key Types Stack-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the numlevels field. Th...

7.8CVSS7.8AI score0.00161EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.6 views

ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The specific flaw exists within the ImportDeviceList method. The issue results from the lack of proper validation of a...

7.2CVSS7.6AI score0.0223EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.7 views

ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateLicense method. The issue results from the lack of proper validation of a user-supplie...

5.5CVSS6.1AI score0.01514EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.7 views

Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is required to exploit this vulnerability. The specific flaw exists within ToggleState.php. The issue results from the lack of proper validation of a user-supplied string befor...

8.8CVSS8.3AI score0.01888EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.6 views

X.Org Server ChangeDrawableAttributes Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling...

5.5CVSS6.2AI score0.00132EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.7 views

Oracle PeopleSoft ExecuteProcessActivityCommand External Control of File Path Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle PeopleSoft. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS8.5AI score0.95473EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.6 views

X.Org Server SetMap Request Stack-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the XkbSetMapChecks...

7.8CVSS7.8AI score0.00165EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.6 views

FlowiseAI Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the run method of the CSVAgents class. The issue results from insufficient input sanitization wh...

9.8CVSS6.7AI score0.01439EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.9 views

Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of...

8.8CVSS8.4AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.9 views

Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of...

8.8CVSS8.4AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.6 views

Fuji Electric Tellus pcid64 Driver File APIs Exposed Dangerous Method Arbitrary File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on affected installations of Fuji Electric Tellus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within calls to...

7.8CVSS7.3AI score0.00146EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.6 views

Oracle PeopleSoft HubMBeanPersistance Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle PeopleSoft. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the HubMBeanPersistance...

7.5CVSS8.7AI score0.95473EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.7 views

Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of...

8.8CVSS8.4AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.8 views

Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Quest NetVault Backup. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the viewclien...

8.8CVSS8.2AI score0.00935EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.7 views

Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of...

8.8CVSS8.4AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.7 views

ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateWar method. The issue results from an incorrect implementation of cryptographic...

7.2CVSS7.6AI score0.0068EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.7 views

Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of...

8.8CVSS8.4AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.7 views

Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Quest NetVault Backup. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the addclient...

8.8CVSS8.2AI score0.00935EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.7 views

ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The specific flaw exists within the restoreDB method. The issue results from the lack of proper validation of a user-supplied pa...

7.2CVSS7.6AI score0.0223EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.6 views

ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The specific flaw exists within the uploadSSL method. The issue results from the lack of proper validation of a user-supplied pa...

5.5CVSS6.1AI score0.01514EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.8 views

Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of...

8.8CVSS8.4AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.6 views

Oracle VirtualBox VMSVGA Stack-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the VMSVGA...

7.5CVSS7.8AI score0.00114EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.7 views

X.Org Server SyncChangeCounter Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of SyncAwa...

7.8CVSS7.7AI score0.00154EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.8 views

X.Org Server FreeCounter Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of SyncAwa...

7.8CVSS7.7AI score0.00154EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/24 12:00 a.m.8 views

X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling...

5.5CVSS6.3AI score0.00141EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/18 12:00 a.m.15 views

(0Day) Ashlar-Vellum Cobalt STP File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS7.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2026/06/11 12:00 a.m.14 views

Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary script on affected installations of Allegra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the downloadAttachment...

4.6CVSS6.1AI score0.00819EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/11 12:00 a.m.6 views

Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung rlottie. Interaction with the rlottie library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the rlotti...

7.8CVSS6.7AI score0.00103EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/11 12:00 a.m.7 views

Allegra exportReport Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the exportReport method. The issue results from the lack of proper validation of a...

6.5CVSS6.6AI score0.01258EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/11 12:00 a.m.6 views

MATE Desktop Atril Document Viewer EPUB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MATE Desktop Atril Document Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6.7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/11 12:00 a.m.6 views

Apache HTTP Server mod_proxy_ajp Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apache HTTP Server. An attacker must first obtain the ability to compromise an AJP backend associated with the target system in order to exploit this vulnerability. The specific flaw exists...

3.7CVSS6.2AI score0.00485EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/10 12:00 a.m.29 views

ASUS MyASUS Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of ASUS MyASUS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ASUS Software Manage...

7.8CVSS6AI score0.00135EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/10 12:00 a.m.35 views

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS5.9AI score0.00356EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:00 a.m.21 views

Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe USD-Fileformat-plugins. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within t...

7.8CVSS6AI score0.00281EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:00 a.m.17 views

X.Org Server SyncAwaitFence Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

7.8CVSS6AI score0.00264EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:00 a.m.25 views

Progress Software Kemp LoadMaster dodelapikey Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the dodelapikey method. The issue results from the lack of proper...

8.8CVSS7.8AI score0.99571EPSS
SaveExploits4References1
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:00 a.m.28 views

Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe USD-Fileformat-plugins. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within t...

7.8CVSS6AI score0.00281EPSS
SaveExploits0References1
Total number of security vulnerabilities17156