Lucene search
+L

203967 matches found

Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.14 views

PT-2026-71866

Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...

4.8CVSS5.2AI score0.00148EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.6 views

PT-2026-71634

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description A time-of-check to time-of-use TOCTOU race condition exists in the non-daemon receiver's destination directory handling. This occurs when an attacker manipulates parent components of the destination pa...

8.3CVSS5.2AI score0.00396EPSS
SaveExploits0References101
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.7 views

PT-2026-71819

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use TOCTOU race condition...

7.1CVSS5.2AI score0.00073EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.8 views

PT-2026-71741

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to unbounded resource allocation...

7.5CVSS5.3AI score0.00386EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.17 views

PT-2026-71862

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to gain privilege escalation via the Navigator for i debugger. This could allow the attacker to access or manipulate sensitive data on the system, or create new profiles with elevated privileges on the IBM i system...

8.2CVSS5.3AI score0.00164EPSS
SaveExploits0References2
Redos
Redos
added 2026/08/13 12:00 a.m.9 views

ROS-20260813-73-0002

The vulnerability in Portainer-Ce is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

9.4CVSS8.3AI score0.00163EPSS
SaveExploits0
Redos
Redos
added 2026/08/13 12:00 a.m.7 views

ROS-20260813-73-0052

The vulnerability in uriparser is related to numerical truncation errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.1CVSS5.8AI score0.00172EPSS
SaveExploits0
Redos
Redos
added 2026/08/13 12:00 a.m.7 views

ROS-20260813-73-0051

The vulnerability in Wireshark is related to overflowing of buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.5CVSS5.8AI score0.00092EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.8 views

PT-2026-71813

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

5.3CVSS5.3AI score0.00357EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.10 views

PT-2026-71855

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an off-by-one error in bounds checking...

5.3CVSS5.3AI score0.00289EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.11 views

PT-2026-71743

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A buffer overflow allows a remote authenticated attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hol...

8.8CVSS6.2AI score0.00436EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-70452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution...

9.1CVSS5.4AI score0.00462EPSS
SaveExploits0References4
Redos
Redos
added 2026/08/13 12:00 a.m.7 views

ROS-20260813-73-0050

The vulnerability of the verifyHostName configuration parameter in the Apache Log4j Core logging library is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to carry out a “man-in-the-middle” attack remotely...

6.3CVSS6.6AI score0.0041EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.30 views

PT-2026-71896

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Pathological inputs can cause an unescaped '/' to close prematurely. This allows attack-controlled data to inject arbitrary content, which may lead to Cross-Site...

6.1CVSS5.5AI score0.0031EPSS
SaveExploits0References107
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-53789

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope of --delete operations beyond the intende...

8.1CVSS6.6AI score0.00357EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-63293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host system. When importing or unpacking an...

9.9CVSS5.8AI score0.00478EPSS
SaveExploits1References3
CBLMariner
CBLMariner
added 2026/08/12 11:21 p.m.13 views

CVE-2026-68327 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68327 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

5.3AI score0.00176EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/08/12 11:21 p.m.12 views

CVE-2026-68110 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68110 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

5.3AI score0.00168EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/08/12 11:21 p.m.11 views

CVE-2026-68222 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68222 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

7.8CVSS5.3AI score0.00138EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/08/12 11:21 p.m.10 views

CVE-2026-64576 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-64576 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

7.1CVSS5.3AI score0.00117EPSS
SaveExploits0
Rows per page
Query Builder