Lucene search
K

4290 matches found

Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.3 views

PT-2025-46387

Name of the Vulnerable Software and Affected Versions IntelR Rapid Storage Technology Application versions prior to 20.0.1021 Description The software contains insecure inherited permissions within Ring 3 User Applications that may allow an escalation of privilege. An unprivileged software...

6.7CVSS6.9AI score0.00094EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/11/11 12:0 a.m.3 views

CVE-2024-57695

An issue in Agnitum Outpost Security Suite 7.5.3 3942.608.1810 and 7.6 3984.693.1842 allows a local attacker to execute arbitrary code via the lock function. The manufacturer fixed the vulnerability in version 8.0 4164.652.1856 from December 17, 2012...

7.2AI score0.00183EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.3 views

PT-2025-46454

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description A heap-based buffer overflow exists in Azure Monitor Agent. This allows an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information...

7.3CVSS6.1AI score0.00302EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.3 views

PT-2025-46509

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A use after free condition exists in Microsoft Office. Exploitation of this issue could allow an unauthorized attacker to execute code locally. The issue involves the use of memory...

7.8CVSS5.6AI score0.00401EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.2 views

PT-2025-46494

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A use after free condition exists in Microsoft Office, potentially allowing an unauthorized attacker to execute code locally. This issue could enable remote attackers to execute...

7.8CVSS6.1AI score0.00716EPSS
Exploits0References14
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.2 views

PT-2025-46475

Name of the Vulnerable Software and Affected Versions Windows OLE affected versions not specified Description A heap-based buffer overflow exists in Windows OLE. This flaw could allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information about a...

7.8CVSS6AI score0.00543EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.6 views

PT-2025-46415

Name of the Vulnerable Software and Affected Versions Intel Driver and Support Assistant versions prior to 25.2 Description An uncontrolled search path exists in some Intel Driver and Support Assistant versions before 25.2 within Ring 3 User Applications, potentially allowing an escalation of...

6.7CVSS6.8AI score0.00112EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.2 views

PT-2025-46394

Name of the Vulnerable Software and Affected Versions IntelR System Support Utility versions prior to 4.1.0 Description An uncontrolled search path exists in the IntelR System Support Utility. This issue, present within Ring 3: User Applications, may allow an escalation of privilege. A local,...

6.7CVSS6.7AI score0.0012EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.2 views

PT-2025-46379

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description An uncontrolled search path exists in some IntelR CIP software. This issue, occurring within Ring 3 User Applications, may allow an escalation of privilege. A local,...

6.7CVSS6.8AI score0.0012EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.2 views

PT-2025-46487

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read issue exists in Microsoft Office Excel. This can allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is no...

7.8CVSS5.7AI score0.00491EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.1 views

PT-2025-46495

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An untrusted pointer dereference exists in Microsoft Office Excel, potentially allowing a local attacker to execute code. This issue could enable unauthorized code execution...

7.8CVSS5.5AI score0.00457EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.1 views

PT-2025-46500

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use after free condition exists in Microsoft Office Word. This can allow an unauthorized attacker to execute code locally. The issue involves improper memory management,...

7.8CVSS5.6AI score0.00382EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.2 views

PT-2025-46498

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A use-after-free condition exists in Microsoft Office Excel that could allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is no...

7.8CVSS5.7AI score0.00481EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.2 views

PT-2025-46496

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow exists in Microsoft Office Excel. This issue could allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is ...

7.8CVSS6AI score0.00457EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/11/11 12:0 a.m.9 views

Rockwell Automation Studio 5000 Simulation Interface 安全漏洞

Rockwell Automation Studio 5000 Simulation Interface is a simulation modeling tool from Rockwell Automation. A code execution vulnerability exists in Rockwell Automation Studio 5000 Simulation Interface, which can be exploited by an attacker to cause scripts to be executed with administrator...

8.9CVSS6.2AI score0.00126EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/11 12:0 a.m.7 views

CVE-2024-57695

An issue in Agnitum Outpost Security Suite 7.5.3 3942.608.1810 and 7.6 3984.693.1842 allows a local attacker to execute arbitrary code via the lock function. The manufacturer fixed the vulnerability in version 8.0 4164.652.1856 from December 17, 2012...

0.00183EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.4 views

PT-2025-46346

Name of the Vulnerable Software and Affected Versions Agnitum Outpost Security Suite versions 7.5.3 3942.608.1810 through 7.6 3984.693.1842 Description A local attacker can execute arbitrary code via the lock function. Recommendations Update to version 8.0 4164.652.1856...

7.7CVSS7.3AI score0.00183EPSS
Exploits1References7
OSV
OSV
added 2025/11/06 9:15 p.m.2 views

CVE-2025-12489

evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of evernote-mcp-server. An attacker must first obtain the ability to execute low-privileged code on the target system in...

7.8CVSS7.6AI score
Exploits0References2
NVD
NVD
added 2025/11/06 9:15 p.m.5 views

CVE-2025-12489

evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of evernote-mcp-server. An attacker must first obtain the ability to execute low-privileged code on the target system in...

7.8CVSS0.0124EPSS
Exploits0References2
NVD
NVD
added 2025/11/04 8:17 p.m.2 views

CVE-2025-23358

NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue. A successful exploit of this vulnerability might lead to code execution and escalation of privileges...

8.2CVSS0.0023EPSS
Exploits0References3
Rows per page
Query Builder