Lucene search
+L

107634 matches found

Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.12 views

PT-2026-62527

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware WebCenter Content: Imaging version 12.2.1.4.0 Oracle Fusion Middleware WebCenter Content: Imaging version 14.1.2.0.0 Description A flaw in the Core component allows a low privileged attacker with network access via HTT...

7.1CVSS7.2AI score0.00287EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.16 views

PT-2026-62705

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Mexico product of Oracle PeopleSoft component: Global Payroll for Mexico. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

5.9CVSS7.1AI score0.00208EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.12 views

PT-2026-62542

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware WebCenter Content: Imaging version 12.2.1.4.0 Oracle Fusion Middleware WebCenter Content: Imaging version 14.1.2.0.0 Description A flaw in the Core component allows a low privileged attacker with network access via HTT...

7.1CVSS7.1AI score0.00222EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.12 views

PT-2026-62566

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Enterprise Capture versions 12.2.1.4.0 and 14.1.2.0.0 Description A flaw in the Client Bundle component of Oracle WebCenter Enterprise Capture allows a low privileged attacker with network access via T3 and IIOP to compromise...

9.9CVSS7.2AI score0.00402EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.11 views

PT-2026-62544

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware WebCenter Content: Imaging version 12.2.1.4.0 Oracle Fusion Middleware WebCenter Content: Imaging version 14.1.2.0.0 Description A flaw in the Core component allows a low privileged attacker with network access via HTT...

8.7CVSS7.1AI score0.00231EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.11 views

PT-2026-62239

Name of the Vulnerable Software and Affected Versions Oracle GoldenGate versions 19.1.0.0.0 through 19.29.0.0 Oracle GoldenGate versions 21.3 through 21.21 Oracle GoldenGate versions 23.4 through 23.26.1.0.0 Description An issue exists in the Service Manager component that allows a low privileged...

8.8CVSS7.1AI score0.00403EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.12 views

PT-2026-61857

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small...

3.7CVSS5.3AI score0.0042EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.13 views

PT-2026-62996

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: GIS. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco...

6.5CVSS6.7AI score0.00303EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.13 views

PT-2026-62531

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Enterprise Capture version 12.2.1.4.0 Oracle WebCenter Enterprise Capture version 14.1.2.0.0 Description A flaw in the Client Bundle component allows a low privileged attacker with network access via T3 and IIOP protocols to...

9.9CVSS7AI score0.00402EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.16 views

PT-2026-63252

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.182 Description A use-after-free issue exists in the UI component, where a remote attacker can exploit heap corruption—a condition where memory is corrupted in the heap area—by using a crafted HTML...

8.8CVSS5.9AI score0.00255EPSS
SaveExploits0References19
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.17 views

PT-2026-62109

A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authenticated remote attacker to perform command injection on certain CLI commands. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

7.2CVSS6AI score0.01651EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.10 views

PT-2026-63051

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A flaw exists in the User and User Group component of the Oracle Agile PLM product within Oracle Supply Chain. A low privileged attacker with network access via HTTP can exploit this issue to compromi...

8.8CVSS7.1AI score0.00402EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.18 views

PT-2026-62082

Name of the Vulnerable Software and Affected Versions DayuanJiang next-ai-draw-io version 0.4.13 Description A remote attacker can obtain sensitive information through the x-ai-provider component. Recommendations At the moment, there is no information about a newer version that contains a fix for...

7.5CVSS5.9AI score0.00369EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/21 12:0 a.m.19 views

CVE-2026-52469

CVE-2026-52469 affects Crocus v1.3.44. A SQL injection vulnerability in DeviceInfoMapper.xml allows a remote attacker to escalate privileges. The issue is described with a high-severity CVSS v3.1 base score of 9.8 (CRITICAL), with network attack vector and no user interaction required. Authors re...

9.8CVSS5.8AI score0.00383EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.17 views

PT-2026-61829

Name of the Vulnerable Software and Affected Versions kronosnet versions prior to 1.35 Description An issue exists in the internal Access Control List ACL subsystem. When the framework is configured to manage dynamic links to accept network traffic from any IP address without network payload...

4.8CVSS5.9AI score0.00165EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.12 views

PT-2026-62691

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description A flaw in the Web Content Management component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to...

8.1CVSS7.1AI score0.00261EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.11 views

PT-2026-62260

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists...

6.6CVSS7AI score0.0035EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/21 12:0 a.m.32 views

CVE-2026-52474

An issue in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file...

0.00375EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.12 views

PT-2026-62148

Name of the Vulnerable Software and Affected Versions Oracle Retail Integration Bus version 16.0.3 Description A flaw in the RIB Kernal component of the Oracle Retail Integration Bus allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation...

9.8CVSS7.2AI score0.00473EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/07/21 12:0 a.m.8 views

EulerOS Virtualization 2.12.0 : krb5 (EulerOS-SA-2026-2777)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gssacceptseccontext on a system...

7.5CVSS7.4AI score0.00611EPSS
SaveExploits2References3
Rows per page
Query Builder