Lucene search
+L

295857 matches found

Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•14 views

PT-2026-103553

Name of the Vulnerable Software and Affected Versions Kiteworks affected versions not specified Description A privilege escalation issue exists in clustered deployments where an attacker with existing code execution on one node can execute operating system commands with elevated privileges on...

8.8CVSS6.2AI score0.00435EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•16 views

PT-2026-103565

Name of the Vulnerable Software and Affected Versions Kiteworks Core affected versions not specified Description An administrative import function fails to verify if the requesting administrator has the necessary permissions to create the privileged integration credential being imported. This...

7.2CVSS5.7AI score0.0103EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•14 views

PT-2026-103550

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator with access to the key protecting submitted dat...

7.2CVSS6.5AI score0.01294EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•12 views

PT-2026-102966

Name of the Vulnerable Software and Affected Versions AiSOC versions 7.2.0 through 11.x Description The actions service contains a flaw when building CrowdStrike Real Time Response command strings by interpolating unescaped action parameters within crowdstrike rtr.py and endpoint.py. Authenticate...

9.4CVSS6.3AI score0.01834EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•12 views

PT-2026-103559

Name of the Vulnerable Software and Affected Versions Kiteworks Core affected versions not specified Description A stored cross-site scripting XSS weakness allows an administrator with limited delegated permissions to store crafted content. When a System Administrator views the affected page,...

8.1CVSS5.7AI score0.0033EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•13 views

PT-2026-103331

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli query of the file User/ord.php of the component Order Placement. Executing a manipulation of the argument id/name can lead to sql injection...

7.5CVSS6.9AI score0.00263EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•9 views

PT-2026-103456

A security vulnerability has been detected in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This impacts an unknown function of the file /admin/ of the component Admin Area. Such manipulation of the argument ID leads to authorization bypass. The attac...

6.5CVSS6AI score0.00224EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•7 views

PT-2026-105983

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;...

9.4CVSS6AI score0.00435EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/30 12:00 a.m.•14 views

CVE-2026-51853

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/filebrowser.py:FileBrowser.init. The FileBrowser class initializes with the host root directory as the workspace, allowing the agent to access any file on the system without restriction...

5.9AI score0.00771EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/09/30 12:00 a.m.•15 views

MFD controller driver Heap Buffer Overflow DoS

The vulnerability of the applesmcprobe function in the drivers/mfd/macsmc.c file of the MFD controller driver for the Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a system failure...

5.5CVSS6.2AI score0.00121EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/09/30 12:00 a.m.•12 views

amdxdna_ubuf_map Heap Buffer Overflow DoS

The vulnerability of the amdxdnaubufmap function in the drivers/accel/amdxdna/amdxdnaubuf.c driver for Linux kernel-based computing devices involves improper memory release memory leak. Exploiting this vulnerability allows a remote attacker to cause system failures...

5.7CVSS6.5AI score0.00154EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/09/30 12:00 a.m.•11 views

Linux kernel DRI DoS

The vulnerability in the vc4savehangstate function within the drivers/gpu/drm/vc4/vc4gem.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel operating system is related to improper memory deallocation “memory leak”. Exploitation of this vulnerability may allow an attacke...

5.5CVSS5.7AI score0.00123EPSS
SaveExploits0References10Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•14 views

CVE-2026-103232: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqliquery of the file admin/tablebooking.php. This manipulation of the argument Name causes sql injection. Remote exploitation of the attack is...

7.5CVSS6.9AI score0.00328EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•14 views

PT-2026-103455

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli query of the file admin/table booking.php. This manipulation of the argument Name causes sql injection. Remote exploitation of the attack ...

7.5CVSS6.9AI score0.00328EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•14 views

PT-2026-103575

Name of the Vulnerable Software and Affected Versions Kiteworks appliance affected versions not specified Description A system notification template on the Kiteworks appliance is processed by a template engine that evaluates expressions within the stored template body. This allows an authenticate...

7.2CVSS5.9AI score0.01204EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-102831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5....

8.1CVSS7.5AI score0.00193EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/09/30 12:00 a.m.•10 views

Linux kernel crypto accelerator DoS

The vulnerability in the ccmacdigest function within drivers/crypto/ccree/cchash.c of the Linux kernel cryptographic accelerator driver is related to improper memory deallocation “memory leak”. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

5.7CVSS5.8AI score0.00123EPSS
SaveExploits0References10Affected Software3
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•13 views

AlmaLinux 9.2 [TuxCare] Security Update: 389-ds-base / 389-ds-base-devel / 389-ds-base-libs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778892584)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778892584 advisory. - A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a serv...

5.7CVSS6AI score0.00598EPSS
SaveExploits0References5
Redos
Redos
•added 2026/09/30 12:00 a.m.•16 views

ROS-20260930-73-0146

The vulnerability of the nv3arb function in the Linux kernel’s drivers/video/fbdev/riva/rivahw.c file is related to incorrect zero division operations. Exploiting this vulnerability can allow an attacker to cause system failures...

5.5CVSS5.9AI score0.00119EPSS
SaveExploits0
Redos
Redos
•added 2026/09/30 12:00 a.m.•20 views

ROS-20260930-73-0109

The vulnerability in the arch/arm64/kernel/signal.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS6.5AI score0.00148EPSS
SaveExploits0
Rows per page
Query Builder