Lucene search
+L

1243 matches found

CNNVD
CNNVD
added 2026/03/05 12:00 a.m.13 views

WordPress plugin UberSlider Ultra 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.6AI score0.0018EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/04 5:16 p.m.23 views

CVE-2025-69969

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

9.6CVSS0.00461EPSS
SaveExploits1References2
OSV
OSV
added 2026/03/04 5:16 p.m.12 views

CVE-2025-69969

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

9.6CVSS6.1AI score0.00461EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/03/04 12:00 a.m.13 views

EUVD-2025-208281

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

9.6CVSS6.2AI score0.00461EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/03/04 12:00 a.m.17 views

PT-2026-22940

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

9.6CVSS6.2AI score0.00461EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/03/04 12:00 a.m.43 views

CVE-2025-69969

A lack of authentication and authorization mechanisms in the Bluetooth Low Energy BLE communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer the protocol and execute arbitrary commands on the device without establishing a connection. This is...

0.00461EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/03/04 12:00 a.m.16 views

SRK Powertech Pebble Prism Ultra 安全漏洞

The SRK Powertech Pebble Prism Ultra is a Bluetooth-enabled smartwatch produced by the Indian company SRK Powertech. Version 2.9.2 of the SRK Powertech Pebble Prism Ultra contains a security vulnerability. This vulnerability stems from the lack of authentication and authorization mechanisms in th...

9.6CVSS6.1AI score0.00461EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2026/02/27 7:18 a.m.17 views

WordPress UberSlider Ultra plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin UberSlider Ultra versions = 2.3...

7.1CVSS5.9AI score0.0018EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/02/13 12:00 a.m.18 views

The vulnerability of the SSH service of Cisco Ultra-Reliable Wireless Backhaul (URWB) network devices on Cisco IEC6400 Wireless Backhaul Edge Compute devices allows a attacker to cause a service failure.

The vulnerability of the SSH service of Cisco’s Ultra-Reliable Wireless Backhaul URWB network devices for Cisco IEC6400 Wireless Backhaul Edge Compute devices is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service...

5.3CVSS5.8AI score0.00321EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/02/05 4:13 p.m.44 views

CVE-2020-37133 UltraVNC Launcher 1.2.4.0 - 'RepeaterHost' Denial of Service

UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in the Repeater Host configuration field that allows attackers to crash the application. Attackers can paste an overly long string of 300 characters into the Repeater Host property to trigger an application crash...

7.5CVSS0.00503EPSS
SaveExploits1References3
Apple
Apple
added 2026/02/02 12:00 a.m.21 views

Apple Security Update: watchOS 9.6.4

Apple recommends to install security update watchOS 9.6.4 on devices Apple Watch Series 4, Series 5, Series 6, Series 7, Series 8, SE, SE 2, and Ultra...

5.3AI score
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2026/01/30 12:00 a.m.12 views

WordPress Plugin Booking Ultra Pro Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Booking Ultra Pro, which...

6.5CVSS5.5AI score0.00377EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/29 12:00 a.m.30 views

PT-2026-5352

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the onTransact function of IDrmManagerService.cpp allows for a possible out-of-bounds write. This condition can be exploited to achieve...

8.4CVSS5.7AI score0.00118EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2026/01/29 12:00 a.m.33 views

PT-2026-5351

Name of the Vulnerable Software and Affected Versions Versions affected versions not specified Description A privilege escalation issue exists due to a confused deputy condition. Successful exploitation could lead to local privilege escalation without requiring additional execution privileges or...

8.4CVSS6.1AI score0.00089EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/01/29 12:00 a.m.11 views

PT-2026-5349

In multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token leak due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7AI score0.00102EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/29 12:00 a.m.19 views

PT-2026-5350

Name of the Vulnerable Software and Affected Versions versions prior to 2026-0007 Description A flaw exists in the writeToParcel function within WindowInfo.cpp that could allow an attacker to trick a user into granting permissions through a tapjacking or overlay attack. This could result in local...

8.6CVSS6.1AI score0.0012EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/01/23 9:17 p.m.23 views

CVE-2025-69180

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in themepassion Ultra Portfolio ultra-portfolio allows Blind SQL Injection.This issue affects Ultra Portfolio: from n/a through = 6.7...

8.5CVSS5.6AI score0.00268EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.13 views

CVE-2025-68006

Insertion of Sensitive Information Into Sent Data vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Retrieve Embedded Sensitive Data.This issue affects Booking Ultra Pro: from n/a through = 1.1.23...

6.5CVSS5.4AI score0.00377EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.12 views

CVE-2025-69180

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in themepassion Ultra Portfolio ultra-portfolio allows Blind SQL Injection.This issue affects Ultra Portfolio: from n/a through = 6.7...

8.5CVSS0.00268EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.13 views

CVE-2025-68006

Insertion of Sensitive Information Into Sent Data vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Retrieve Embedded Sensitive Data.This issue affects Booking Ultra Pro: from n/a through = 1.1.23...

6.5CVSS0.00377EPSS
SaveExploits0References1
Rows per page
Query Builder