Lucene search
K

27 matches found

Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.9 views

PT-2026-1551

Name of the Vulnerable Software and Affected Versions TP-Link Archer BE400 version 1.1.0 Build 20250710 rel.14914 Description A flaw exists in the 802.11 modules of the TP-Link Archer BE400 that can lead to a denial-of-service DoS condition. An attacker in close proximity can trigger a device...

7.1CVSS6.6AI score0.00209EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2025/12/19 11:25 a.m.12 views

CVE-2025-10910

A flaw in the binding process of Govee’s cloud platform and devices allows a remote attacker to bind an existing, online Govee device to the attacker’s account, resulting in full control of the device and removal of the device from its legitimate owner’s account. The server‑side API allows device...

9.3CVSS6.7AI score0.00358EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.6 views

PT-2025-46372

Name of the Vulnerable Software and Affected Versions NETGEAR DGN2200v4 versions prior to 1.0.0.132 Description A flaw exists in input validation within the NETGEAR DGN2200v4 N300 Wireless ADSL2+ Modem Router. This issue allows attackers with direct network access to potentially execute code on t...

7.7CVSS6.8AI score0.00231EPSS
Exploits0References4
CVE
CVE
added 2025/10/13 6:57 a.m.15 views

CVE-2025-9265

Kiloview NDI N30 contains a broken authorization vulnerability that could let a remote unauthenticated attacker deactivate user verification and perform administrator actions. Affected products: Kiloview NDI N30; vulnerable component: authorization mechanism; root cause: bypass of user verificati...

10CVSS6.6AI score0.0022EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-44952

Malicious code in bioql PyPI...

6.1CVSS6.8AI score0.00275EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-32087

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.01235EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/23 12:23 a.m.13 views

CVE-2025-27213

An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect devices to enable Android Debug Bridge ADB and make unsupported changes to the system. Affected Products: UniFi Connect EV Station Pro Version 1.5.18 and earlier UniFi Connect Display Versio...

4.9CVSS7.1AI score0.00229EPSS
Exploits0References1
CERT
CERT
added 2025/08/15 12:0 a.m.9 views

SMM Memory Corruption Vulnerability in the AMI Aptio's SMM Module Across Multiple Devices

Overview System Management Mode SMM memory corruption vulnerabilities have been identified in UEFI modules present in AMI Aptio UEFI firmware. An attacker could exploit this vulnerability to elevate privileges and execute arbitrary code in the highly privileged SMM environment. Users should apply...

6.1CVSS8.1AI score0.00174EPSS
Exploits0References12
Positive Technologies
Positive Technologies
added 2025/04/18 12:0 a.m.3 views

PT-2025-17288

Name of the Vulnerable Software and Affected Versions ASUS AiCloud affected versions not specified Description A critical authentication control issue exists in ASUS AiCloud, potentially allowing attackers to bypass authentication and execute unauthorized functions on affected devices remotely. T...

9.7CVSS9.2AI score0.00968EPSS
Exploits1References61
Positive Technologies
Positive Technologies
added 2025/01/28 12:0 a.m.5 views

PT-2025-1924

Name of the Vulnerable Software and Affected Versions Satera MF656Cdw/Satera MF654Cdw versions v05.04 and earlier Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw versions v05.04 and earli...

9.8CVSS7.9AI score0.01181EPSS
Exploits0References22
Tenable Nessus
Tenable Nessus
added 2024/12/19 12:0 a.m.11 views

Rockwell Automation PowerMonitor 1000 Unprotected Alternate Channel (CVE-2024-12371)

A device takeover vulnerability exists in the affected product. This vulnerability allows configuration of a new Policyholder user without any authentication via API. Policyholder user is the most privileged user that can perform edit operations, creating admin users and performing factory reset...

9.3CVSS8.6AI score0.00539EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/04/29 12:0 a.m.4 views

PT-2024-15859 · Grandstream · Grandstream Ucm Series Ip Pbx

Name of the Vulnerable Software and Affected Versions: Grandstream UCM Series IP PBX versions prior to 1.0.20.52 Description: The issue is related to a parameter injection vulnerability in the HTTP interface. A remote and authenticated attacker can execute arbitrary code by sending a crafted HTTP...

8.8CVSS8.4AI score0.0088EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/04/04 12:0 a.m.4 views

PT-2024-21010 · Elecom · Wmc-X1800Gst-B +2

Name of the Vulnerable Software and Affected Versions: ELECOM wireless LAN routers versions prior to v1.25 WRC-G01-W versions prior to v1.24 WMC-X1800GST-B versions prior to v1.41 Description: The issue allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands by sending...

8.8CVSS8.2AI score0.01135EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/03/29 12:0 a.m.3 views

PT-2024-2641 · Dji · Dji Matrice 300 +6

Name of the Vulnerable Software and Affected Versions: DJI Mavic 3 Pro versions prior to v01.01.0300 DJI Mavic 3 versions prior to v01.00.1200 DJI Mavic 3 Classic versions prior to v01.00.0500 DJI Mavic 3 Enterprise versions prior to v07.01.10.03 DJI Matrice 300 versions prior to v57.00.01.00 DJI...

6.8CVSS7.6AI score0.00246EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2024/01/01 12:0 a.m.3 views

PT-2024-41086

Name of the Vulnerable Software and Affected Versions Debian Linux affected versions not specified amd64-microcode affected versions not specified linux affected versions not specified Description The issue concerns a microcode signature verification vulnerability in AMD CPU. It affects packages...

6.4CVSS7.5AI score0.00097EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2023/09/06 12:0 a.m.6 views

PT-2023-5597 · Tp Link · Archer A10 +2

Name of the Vulnerable Software and Affected Versions: Archer AX50 versions prior to Archer AX50JP V1 230529 Archer A10 versions prior to Archer A10JP V2 230504 Archer AX10 versions prior to Archer AX10JP V1.2 230508 Archer AX11000 versions prior to Archer AX11000JP V1 230523 Description: Multipl...

8CVSS7.8AI score0.00418EPSS
Exploits0References12
Positive Technologies
Positive Technologies
added 2023/04/28 12:0 a.m.4 views

PT-2023-22514 · Magicjack · Magicjack A921 Usb Phone Jack

Name of the Vulnerable Software and Affected Versions: MagicJack A921 USB Phone Jack versions prior to Rev 3.0 V1.4 Description: The MagicJack device, a VoIP solution for internet phone calls, contains a hidden NAND flash memory partition allowing unauthorized read/write access. Attackers can...

6.6CVSS7.1AI score0.00472EPSS
Exploits1References9
Lenovo
Lenovo
added 2023/01/06 7:14 p.m.10 views

Intel PROSet Wireless WiFi and Killer WiFi Advisory - Lenovo Support US

No description provided...

5.5AI score
Exploits0
Positive Technologies
Positive Technologies
added 2022/12/13 12:0 a.m.6 views

PT-2022-27835 · Siemens · Scalance X204Rna Eec +1

Name of the Vulnerable Software and Affected Versions: SCALANCE X204RNA HSR versions prior to V3.2.7 SCALANCE X204RNA PRP versions prior to V3.2.7 SCALANCE X204RNA EEC HSR versions prior to V3.2.7 SCALANCE X204RNA EEC PRP versions prior to V3.2.7 SCALANCE X204RNA EEC PRP/HSR versions prior to...

7.5CVSS7.3AI score0.00665EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/11/01 12:0 a.m.5 views

PT-2022-18508 · Sick · Sick Sim1004

Name of the Vulnerable Software and Affected Versions: SICK SIM1004 Partnumber 1098148 versions prior to 2.0.0 Description: A password recovery issue allows an unprivileged remote attacker to invoke the password recovery mechanism method, gaining access to the user level defined as...

9.8CVSS9.4AI score0.01235EPSS
Exploits0References2
Rows per page
Query Builder