Lucene search
+L

261996 matches found

Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.25 views

PT-2026-58117

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description A protection mechanism failure in the Windows Event Logging Service allows an authorized attacker to disclose sensitive information over a network. Specifically, the system recorded the fu...

6.5CVSS5.5AI score0.00907EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.28 views

PT-2026-58262

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description Resource allocation without limits or throttling allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment, there is no information about...

7.5CVSS6.1AI score0.01008EPSS
SaveExploits0References31
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.21 views

PT-2026-58759

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Linux affected versions not specified Description A stack-based buffer overflow exists in the software, which occurs when a program writes more data to a buffer located on the stack than the buffer is allocat...

7.5CVSS5.7AI score0.00527EPSS
SaveExploits0References3
Kaspersky
Kaspersky
added 2026/07/14 12:00 a.m.17 views

KLA91144 Multiple vulnerability in Microsoft Device

Multiple vulnerability was found in Microsoft Device. Malicious users can exploit this vulnerability to bypass security restrictions, gain privileges. Original advisories CVE-2026-48581 Exploitation CVE list CVE-2026-48581 critical KB list Solution Install necessary updates from the KB section,...

7.8CVSS7.3AI score0.00298EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.27 views

PT-2026-58808

Name of the Vulnerable Software and Affected Versions jackson-databind versions 2.18.0 through 2.18.8 jackson-databind versions 2.21.0 through 2.21.4 jackson-databind versions 2.22.0 through 2.22.0 jackson-databind versions 3.1.0 through 3.1.4 jackson-databind versions 3.2.0 through 3.2.0...

6.5CVSS6.1AI score0.00346EPSS
SaveExploits0References22
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.33 views

PT-2026-58668

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A use-after-free and double-free condition exists in the DirectX Graphics Kernel dxgkrnl. The issue occurs during the rollback process of a failed D3DKMTCreateAllocation function call...

7CVSS7AI score0.00264EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.33 views

PT-2026-58844

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An integer overflow or wraparound occurs, which can be exploited by an attacker to crash the application. This leads to a denial-of-service condition and does not require user...

6.2CVSS6.1AI score0.00289EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.21 views

PT-2026-58575

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A double free issue exists in Microsoft Office Word, which allows an unauthorized attacker to execute code locally. This occurs when a victim opens a specially crafted file,...

7.8CVSS6.4AI score0.00571EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.18 views

PT-2026-58717

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description An issue exists where resources are allocated without limits or throttling, allowing an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment...

7.8CVSS6.1AI score0.0084EPSS
SaveExploits0References48
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.35 views

PT-2026-58675

Name of the Vulnerable Software and Affected Versions Devolutions Server version 2026.2.11 Devolutions Server version 2026.1.22 Description Improper authorization in the PAM SSH key and certificate retrieval endpoints allows an authenticated low-privileged user to disclose the private key of an S...

7.5CVSS5.2AI score0.00253EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.11 views

PT-2026-58201

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use after free issue in the Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application...

7.1CVSS6.3AI score0.00333EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.16 views

PT-2026-58914

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

6.9CVSS6.2AI score0.0034EPSS
SaveExploits0References9
Redos
Redos
added 2026/07/14 12:00 a.m.11 views

ROS-20260714-73-0031

The vulnerability of the GNW protocol analyzer, which is part of the Wireshark network traffic analyzer, relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6.3AI score0.00124EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.25 views

PT-2026-58146

Name of the Vulnerable Software and Affected Versions Microsoft Windows Speech affected versions not specified Description A use-after-free condition in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs wh...

7.8CVSS6.2AI score0.003EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.20 views

PT-2026-58270

Name of the Vulnerable Software and Affected Versions Azure CycleCloud versions prior to 8.9.1-3806 Description Missing authorization allows an authorized attacker to elevate privileges over a network. Recommendations Upgrade to build 8.9.1-3806...

6.5CVSS6.1AI score0.00644EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.21 views

PT-2026-58899

Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a Composer package bin entry containing .. path segments can resolve outside the package install directory and cause Composer's binary installation flow to chmod an existing host file to a world-readable and...

6.1CVSS6.1AI score0.00172EPSS
SaveExploits0References7
AlmaLinux
AlmaLinux
added 2026/07/14 12:00 a.m.13 views

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: net: bridge: use a stable FDB dst snapshot in RCU readers CVE-2026-46086 kernel: xfrm: defensively unhash xfrmstate lists in...

7.8CVSS6.7AI score0.00467EPSS
SaveExploits9References8
Circl
Circl
added 2026/07/13 11:24 p.m.13 views

CVE-2026-13039

creationtimestamp| type| source ---|---|--- 2026-07-13 23:24:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqktmni3so2c...

5.3CVSS6.1AI score0.00353EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/13 11:18 p.m.15 views

MGASA-2026-0249 Updated ffmpeg packages fix a security vulnerability

The updated packages fix a security vulnerability: Heap out-of-bounds write via odd sliceheight in FFmpeg MagicYUV decoder. CVE-2026-8461...

8.8CVSS7AI score0.01572EPSS
SaveExploits3References3
Mageia
Mageia
added 2026/07/13 11:18 p.m.14 views

Updated libxml2 packages fix a security vulnerability

The updated packages fix a security vulnerability: Denial of service via crafted xsd-validated document. CVE-2026-6732...

7.5CVSS6.1AI score0.00632EPSS
SaveExploits1References3
Rows per page
Query Builder