Lucene search
+L

853 matches found

Positive Technologies
Positive Technologies
added 2026/07/28 12:00 a.m.43 views

PT-2026-65416

Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could result in complete administrative unavailability of the device...

8.1CVSS5.9AI score0.00288EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/23 12:00 a.m.25 views

PT-2026-63610

Modals gallery paths could enumerate unintended directories...

5.2AI score0.00224EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/23 12:00 a.m.16 views

PT-2026-63912

Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...

4.3CVSS5.2AI score0.0027EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/22 12:00 a.m.24 views

PT-2026-63390

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.7.0 through 1.25.1 Description When the dnscrypt: clause contains more dnscrypt-provider-cert: files than matching dnscrypt-secret-key: files, the software fails to properly initialize all slots, leaving some fill...

5.9CVSS5.8AI score0.00257EPSS
SaveExploits0References29
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.8 views

PT-2026-61990

Name of the Vulnerable Software and Affected Versions NVIDIA Transformers4Rec affected versions not specified Description Improper deserialization of untrusted data occurs within the load model trainer states from checkpoint function. This flaw allows an attacker to potentially execute arbitrary...

4.3CVSS5.4AI score0.00379EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/15 12:00 a.m.43 views

PT-2026-60299

Name of the Vulnerable Software and Affected Versions Secure Access publisher versions prior to 14.55 Description A resource exhaustion issue exists in the Secure Access publisher. Attackers possessing valid credentials for the Secure Access tunnel can trigger a non-persistent Denial of Service...

5.1CVSS6.1AI score0.00367EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.17 views

PT-2026-58170

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free condition in the Windows Kernel allows an unauthorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment,...

9.3CVSS7.2AI score0.00364EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/08 12:00 a.m.13 views

PT-2026-56667

Name of the Vulnerable Software and Affected Versions Drupal Clean RESTful versions . Description A security issue exists in Drupal Clean RESTful. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

6.1AI score0.00309EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/03 12:00 a.m.27 views

PT-2026-55609

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description A spoofing issue exists in Microsoft Edge Chromium-based, which could allow an attacker to impersonate a trusted entity or website to deceive users. Recommendations At t...

6.5CVSS6AI score0.00876EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/07/01 12:00 a.m.25 views

PT-2026-54688

Name of the Vulnerable Software and Affected Versions Google Chrome on ChromeOS versions prior to 150.0.7871.46 Description An uninitialized use in Dawn allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted HTML page. Recommendations Update...

9.6CVSS6AI score0.00523EPSS
SaveExploits1References449
Positive Technologies
Positive Technologies
added 2026/06/29 12:00 a.m.22 views

PT-2026-53686

Content removed...

6.9CVSS5.8AI score0.00237EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/06/28 12:00 a.m.19 views

PT-2026-53224

Name of the Vulnerable Software and Affected Versions Edimax EW-7478APC version 1.04 Description A remote buffer overflow exists in the POST Request Handler component. The issue occurs within the formUSBFolder function located in the /goform/formUSBFolder endpoint when processing the ShareName or...

9CVSS7.6AI score0.00805EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/25 12:00 a.m.18 views

PT-2026-52578

Name of the Vulnerable Software and Affected Versions MSI NBFoundation Service version 2.0.2506.1201 Description Insecure permissions in the MSIAPService.exe component allow a remote attacker to obtain sensitive information. Recommendations At the moment, there is no information about a newer...

7.5CVSS5.8AI score0.00535EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/06/25 12:00 a.m.45 views

PT-2026-55840

Name of the Vulnerable Software and Affected Versions Protego versions prior to 0.6.2-1.1 Description Security issues were identified in the Protego package within the openSUSE Tumbleweed distribution. Recommendations Update to version 0.6.2-1.1...

5.9AI score
SaveExploits0References8
Cvelist
Cvelist
added 2026/06/24 4:30 p.m.54 views

CVE-2026-53095 bpf: Fix abuse of kprobe_write_ctx via freplace

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix abuse of kprobewritectx via freplace uprobe programs are allowed to modify struct ptregs. Since the actual program type of uprobe is KPROBE, it can be abused to modify struct ptregs via kprobe+freplace when the kprobe...

0.0016EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/24 12:00 a.m.8 views

PT-2026-52997

CVE ID :CVE-2026-56118 Published : June 24, 2026, 3:11 p.m. | 1 hour, 27 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/20 12:00 a.m.44 views

PT-2026-51188

Name of the Vulnerable Software and Affected Versions AOMEI Partition Assistant versions prior to 10.10.2 Description Improper access controls exist within the Kernel Driver component, specifically affecting unknown code in the ampa10.sys library. This issue allows a local attacker to manipulate...

8.5CVSS7.2AI score0.00162EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2026/06/20 12:00 a.m.37 views

PT-2026-51195

Name of the Vulnerable Software and Affected Versions Apache NiFi versions 0.0.1 through 2.9.0 Description Apache NiFi allows the construction of qualified URLs using several HTTP request headers that serve as alternatives to the standard Host header without validating the provided values. While ...

6.3CVSS5.9AI score0.00327EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/06/19 12:00 a.m.36 views

PT-2026-51033

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Online affected versions not specified Description Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network. There have been reports of elevated activities targeti...

9.6CVSS5.8AI score0.00689EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/06/19 12:00 a.m.26 views

PT-2026-52062

Name of the Vulnerable Software and Affected Versions Node.js versions 22.x through 26.3.0 Description A flaw in the TLS host verification process allows an attacker to bypass certification validation. Recommendations Update Node.js to version 26.3.1 or later...

9.8CVSS7.1AI score0.03711EPSS
SaveExploits0References168
Rows per page
Query Builder