Lucene search
+L

521 matches found

Positive Technologies
Positive Technologies
added 2025/08/12 12:00 a.m.7 views

PT-2025-32830 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions affected versions not specified Description: An issue exists in Windows Push Notifications related to access of a resource using an incompatible type 'type confusion'. This allows an authorized attacker to elevate privileges...

7.8CVSS6.9AI score0.0044EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/08/12 12:00 a.m.5 views

PT-2025-32831 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A type confusion issue exists in Windows Push Notifications. This allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about ...

7.8CVSS6.2AI score0.00449EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/08/12 12:00 a.m.8 views

Microsoft Windows Push Notifications 安全漏洞

Microsoft Windows Push Notifications is a push notification service from Microsoft Corporation USA. It provides a reliable way to deliver new updates. A security vulnerability exists in Microsoft Windows Push Notifications. An attacker could exploit the vulnerability to elevate privileges. The...

7.8CVSS6.3AI score0.00449EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/12 12:00 a.m.10 views

Microsoft Windows Push Notifications 安全漏洞

Microsoft Windows Push Notifications is a push notification service from Microsoft Corporation USA. It provides a reliable way to deliver new updates. A security vulnerability exists in Microsoft Windows Push Notifications. An attacker could exploit the vulnerability to elevate privileges. The...

7.8CVSS6.3AI score0.0044EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/12 12:00 a.m.10 views

Microsoft Windows Push Notifications 安全漏洞

Microsoft Windows Push Notifications is a push notification service from Microsoft Corporation USA. It provides a reliable way to deliver new updates. A security vulnerability exists in Microsoft Windows Push Notifications. An attacker could exploit the vulnerability to elevate privileges. The...

7.8CVSS6.3AI score0.00449EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/12 12:00 a.m.4 views

PT-2025-32829 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions affected versions not specified Description: An issue exists in Windows Push Notifications where access of a resource using an incompatible type 'type confusion' can allow an authorized attacker to elevate privileges locally...

7.8CVSS6.9AI score0.00449EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/08/12 12:00 a.m.10 views

Microsoft Windows Push Notifications 安全漏洞

Microsoft Windows Push Notifications is a push notification service from Microsoft Corporation USA. It provides a reliable way to deliver new updates. A security vulnerability exists in Microsoft Windows Push Notifications. An attacker could exploit the vulnerability to elevate privileges. The...

7.8CVSS6.3AI score0.0044EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/12 12:00 a.m.5 views

PT-2025-32778 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions affected versions not specified Description: An issue exists in Windows Push Notifications related to access of a resource using an incompatible type, also known as a 'type confusion'. This can allow an authorized attacker to...

7.8CVSS6.9AI score0.0044EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-4580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability...

6.5CVSS6.7AI score0.00422EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/07/23 12:00 a.m.12 views

WordPress Ultimate Push Notifications Missing Authorization Vulnerability

WordPress Ultimate Push Notifications is a plugin that is mainly used to implement real-time push functionality in WordPress websites, supporting sending desktop and mobile device notifications to users. WordPress Ultimate Push Notifications suffers from a lack of authorization vulnerability, no...

6.5CVSS6.9AI score0.0025EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/18 11:54 a.m.17 views

CVE-2025-50028

Missing Authorization vulnerability in CodeSolz Ultimate Push Notifications ultimate-push-notifications allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Push Notifications: from n/a through = 1.2.0...

6.5CVSS5.9AI score0.0025EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/16 12:15 p.m.17 views

CVE-2025-50028

Missing Authorization vulnerability in CodeSolz Ultimate Push Notifications ultimate-push-notifications allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Push Notifications: from n/a through = 1.2.0...

6.5CVSS0.0025EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.12 views

WordPress plugin Ultimate Push Notifications 安全漏洞

WordPress Ultimate Push Notifications is a plugin that is mainly used to implement real-time push functionality in WordPress websites, supporting sending desktop and mobile device notifications to users. WordPress Ultimate Push Notifications suffers from a lack of authorization vulnerability, no...

6.5CVSS6.8AI score0.0025EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.19 views

PT-2025-29810 · Unknown · Codesolz Ultimate Push Notifications

Name of the Vulnerable Software and Affected Versions: CodeSolz Ultimate Push Notifications versions through 1.1.9 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update CodeSolz Ultimate Push...

6.5CVSS6.3AI score0.0025EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 8:57 a.m.10 views

CVE-2024-39767

Mattermost Mobile Apps versions =2.16.0 fail to validate that the push notifications received for a server actually came from this serve that which allows a malicious server to send push notifications with another server’s diagnostic ID or server URL and have them show up in mobile apps as that...

6.5CVSS6.9AI score0.00208EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:20 a.m.12 views

CVE-2024-44021

Missing Authorization vulnerability in truepushplugin Truepush truepush-free-web-push-notifications.This issue affects Truepush: from n/a through = 1.0.8...

8.8CVSS5.9AI score0.00446EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:07 p.m.9 views

CVE-2022-3610

The Jeeng Push Notifications WordPress plugin before 2.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.6AI score0.00501EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2025/05/22 7:08 p.m.7 views

CVE-2021-20846

Cross-site request forgery CSRF vulnerability in Push Notifications for WordPress Lite versions prior to 6.0.1 allows a remote attacker to hijack the authentication of an administrator and conduct an arbitrary operation via a specially crafted web page...

8.8CVSS7.5AI score0.00653EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 6:08 p.m.9 views

CVE-2025-32540

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in feedify Feedify – Web Push Notifications push-notification-by-feedify allows Reflected XSS.This issue affects Feedify – Web Push Notifications: from n/a through = 2.4.5...

7.1CVSS7.2AI score0.00276EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/17 4:15 p.m.6 views

CVE-2025-32540

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in feedify Feedify – Web Push Notifications push-notification-by-feedify allows Reflected XSS.This issue affects Feedify – Web Push Notifications: from n/a through = 2.4.5...

7.1CVSS0.00276EPSS
SaveExploits0References1
Rows per page
Query Builder