Lucene search
+L

41466 matches found

Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.11 views

PT-2026-34148

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.6 Description An issue in the Core component of Oracle VM VirtualBox allows a high privileged attacker with logon access to the infrastructure where the software executes to compromise the system. Successful...

7.5CVSS7.6AI score0.00197EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.15 views

PT-2026-3704

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.14 and 7.2.4 Description An easily exploitable issue exists in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. A high-privileged attacker with access to the infrastructure where Orac...

8.2CVSS7.3AI score0.00274EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.20 views

PT-2026-7641

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.45 Description A flaw exists in the WebGPU implementation of Google Chrome. This issue could allow a remote attacker to potentially access memory outside of the intended boundaries. This can occur...

8.8CVSS5.5AI score0.08586EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.14 views

PT-2026-3735

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.14 and 7.2.4 Description An easily exploitable issue exists in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. A high-privileged attacker with access to the infrastructure where Orac...

8.2CVSS7.3AI score0.00204EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.16 views

PT-2026-3734

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.14 and 7.2.4 Description An easily exploitable issue exists in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. A high-privileged attacker with access to the infrastructure where Orac...

8.2CVSS7.3AI score0.00204EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.26 views

PT-2026-3737

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.14 and 7.2.4 Description An easily exploitable issue exists in the Oracle VM VirtualBox Core component, potentially allowing a high-privileged attacker with access to the system where Oracle VM VirtualBox runs...

8.2CVSS7.3AI score0.00204EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.13 views

PT-2026-3731

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.14 and 7.2.4 Description A difficult to exploit issue exists in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. An attacker with high privileges who has access to the system where...

7.5CVSS7.2AI score0.00206EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.8 views

PT-2026-26522

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.153 Description A flaw exists in Google Chrome's Navigation feature due to inadequate validation of untrusted input. This could allow a remote attacker who has already compromised the renderer process...

8.8CVSS6.1AI score0.00415EPSS
SaveExploits2References40
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.18 views

PT-2026-34165

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.6 Description An issue in the Core component allows a high privileged attacker with logon access to the infrastructure where the software executes to compromise the system. Successful exploitation can lead to...

5CVSS7.6AI score0.00096EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.11 views

PT-2026-21575

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.116 Description A flaw exists in Google Chrome's DevTools due to an inappropriate implementation. An attacker could potentially convince a user to install a malicious extension. This would allow the...

8.8CVSS5.3AI score0.00184EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.15 views

PT-2026-34163

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.6 Description An issue in the Core component of Oracle VM VirtualBox allows a high privileged attacker with logon access to the infrastructure where the software executes to compromise the system. Successful...

7.5CVSS7.6AI score0.00107EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.17 views

PT-2026-3703

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.14 and 7.2.4 Description An easily exploitable issue exists in the Oracle VM VirtualBox Core component, potentially allowing a high-privileged attacker with access to the system where Oracle VM VirtualBox runs...

8.2CVSS7.3AI score0.00274EPSS
SaveExploits0References20
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.17 views

PT-2026-34164

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.6 Description An issue in the Core component allows a high privileged attacker with logon access to the infrastructure where the software executes to compromise the system. Successful exploitation can lead to...

6CVSS7.7AI score0.00124EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.17 views

PT-2026-3732

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.14 and 7.2.4 Description An easily exploitable issue exists in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. A high-privileged attacker with access to the infrastructure where Orac...

6CVSS7.3AI score0.00245EPSS
SaveExploits0References12
RedhatCVE
RedhatCVE
added 2025/12/31 11:05 a.m.14 views

CVE-2025-15244

A vulnerability has been found in PHPEMS up to 11.0. This impacts an unknown function of the component Purchase Request Handler. The manipulation leads to race condition. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is said to be...

6.3CVSS6.2AI score0.00398EPSS
SaveExploits1References1
NVD
NVD
added 2025/12/31 8:15 a.m.15 views

CVE-2025-15017

A vulnerability exists in serial device servers where active debug code remains enabled in the UART interface. An attacker with physical access to the device can directly connect to the UART interface and, without authentication, user interaction, or execution conditions, gain unauthorized access...

7CVSS0.00284EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 7:44 a.m.6 views

CVE-2025-15017

A vulnerability exists in serial device servers where active debug code remains enabled in the UART interface. An attacker with physical access to the device can directly connect to the UART interface and, without authentication, user interaction, or execution conditions, gain unauthorized access...

7CVSS6.6AI score0.00284EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/31 7:44 a.m.12 views

EUVD-2025-205900

A vulnerability exists in serial device servers where active debug code remains enabled in the UART interface. An attacker with physical access to the device can directly connect to the UART interface and, without authentication, user interaction, or execution conditions, gain unauthorized access...

7CVSS6.5AI score0.00284EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/31 7:32 a.m.8 views

CVE-2025-2026

The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability CVE-2025-2026 that allows remote attackers to execute a null byte injection through the device’s web API. This may lead to an unexpected device reboot and result in a denial-of-service DoS condition. An authenticated...

7.1CVSS6.6AI score0.00402EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/12/31 12:27 a.m.8 views

SUSE CVE-2023-54268

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Don't wake up kswapd from fillpool syzbot is reporting a lockdep warning in fillpool because the allocation from debugobjects is using GFPATOMIC, which is GFPHIGH | GFPKSWAPDRECLAIM and therefore tries to wake up...

6.6AI score0.002EPSS
SaveExploits0References3
Rows per page
Query Builder