Lucene search
+L

6867 matches found

Positive Technologies
Positive Technologies
•added 2025/07/15 12:00 a.m.•20 views

PT-2025-29542 · WordPress · Restrict File Access

Name of the Vulnerable Software and Affected Versions: Restrict File Access plugin for WordPress versions up to and including 1.1.2 Description: The Restrict File Access plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on the...

8.1CVSS7.5AI score0.00302EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2025/07/15 12:00 a.m.•21 views

PT-2025-29574 · Dassault Systèmes · Solidworks Desktop +1

Name of the Vulnerable Software and Affected Versions: SOLIDWORKS eDrawings versions prior to SOLIDWORKS Desktop 2025 Description: A use-after-free issue exists in the IPT file reading procedure. This could allow an attacker to execute arbitrary code when opening a specially crafted IPT file...

7.8CVSS7.2AI score0.00198EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/07/15 12:00 a.m.•16 views

PT-2025-29626

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.14 Description A vulnerability exists in the Oracle Applications Framework component Web Utilities of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can...

6.4CVSS7.2AI score0.00278EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/07/15 12:00 a.m.•18 views

PT-2025-29537

Name of the Vulnerable Software and Affected Versions HT Contact Form Widget for Elementor Page Builder & Gutenberg Blocks & Form Builder versions up to and including 2.2.1 Description The HT Contact Form Widget plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient fil...

9.8CVSS6.7AI score0.0119EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2025/07/15 12:00 a.m.•3 views

PT-2025-29662

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.42 Description A flaw exists in the Oracle MySQL Server Replication component that allows a high-privileged attacker with network access to cause a denial-of-service DoS condition, resulting in a hang or...

6.8CVSS5AI score0.01069EPSS
SaveExploits1References290
OpenVAS
OpenVAS
•added 2025/07/15 12:00 a.m.•9 views

Fedora: Security Advisory (FEDORA-2025-5ea2b69c03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.4AI score0.0098EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2025/07/15 12:00 a.m.•6 views

Fedora: Security Advisory (FEDORA-2025-e286662e59)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS9.5AI score0.00877EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/07/14 12:00 a.m.•18 views

PT-2025-29437 · Avid · Avid Nexis Pro+ +2

Name of the Vulnerable Software and Affected Versions: Avid NEXIS E-series versions prior to 2025.5.1 Avid NEXIS F-series versions prior to 2025.5.1 Avid NEXIS PRO+ versions prior to 2025.5.1 System Director Appliance SDA+ versions prior to 2025.5.1 Description: The application is susceptible to ...

7.1CVSS6.5AI score0.00425EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/07/14 12:00 a.m.•8 views

PT-2025-29507

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.1.2-0 ImageMagick versions prior to 6.9.13-26 Description: ImageMagick is free and open-source software used for editing and manipulating digital images. In the magick stream command, specifying multiple...

9.8CVSS6.5AI score0.0095EPSS
SaveExploits3References79
Positive Technologies
Positive Technologies
•added 2025/07/14 12:00 a.m.•25 views

PT-2025-29423 · Lb Link · Lb-Link Bl-Ac1900 +5

Name of the Vulnerable Software and Affected Versions: LB-LINK BL-AC1900 LB-LINK BL-AC2100 AZ3 LB-LINK BL-AC3600 LB-LINK BL-AX1800 LB-LINK BL-AX5400P LB-LINK BL-WR9000 versions up to 20250702 Description: A critical vulnerability exists that leads to information disclosure. The issue is located i...

6.9CVSS4.9AI score0.00408EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2025/07/14 12:00 a.m.•23 views

PT-2025-29525 · Racoon · Dracoon Branding Service

Name of the Vulnerable Software and Affected Versions: DRACOON Branding Service versions prior to 2.10.0 Description: DRACOON is a file sharing service, and the DRACOON Branding Service allows customers to customize their DRACOON interface. Versions prior to 2.10.0 are susceptible to cross-site...

4CVSS6.2AI score0.00217EPSS
SaveExploits0References7
OpenVAS
OpenVAS
•added 2025/07/14 12:00 a.m.•13 views

Fedora: Security Advisory (FEDORA-2025-b1082e9269)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.5AI score0.00665EPSS
SaveExploits2References4
OpenVAS
OpenVAS
•added 2025/07/14 12:00 a.m.•3 views

Fedora: Security Advisory (FEDORA-2025-89abd49c4a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.7AI score0.00198EPSS
SaveExploits1References5
Snyk
Snyk
•added 2025/07/11 3:31 p.m.•8 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via the ClassUtils.getClass function. An attacker can cause the application to terminate unexpectedly by providing excessively long input values. Remediation Upgrade org.apache.commons:commons-lang3 to version...

8.8CVSS7AI score0.02632EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/07/11 12:00 a.m.•29 views

PT-2025-29211 · WordPress · Gb Forms Db

Name of the Vulnerable Software and Affected Versions: GB Forms DB plugin for WordPress versions up to and including 1.0.2 Description: The GB Forms DB plugin for WordPress is susceptible to Remote Code Execution via the gbfdb talk to front function. The function accepts user input and passes it...

9.8CVSS7.5AI score0.00978EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2025/07/11 12:00 a.m.•27 views

PT-2025-29216 · WordPress · Woodmart

Name of the Vulnerable Software and Affected Versions: WoodMart versions prior to 8.2.6 Description: The WoodMart plugin for WordPress is vulnerable to Information Exposure in versions prior to 8.2.6 due to insufficient restrictions on post inclusion within the woodmart get posts by query functio...

5.3CVSS6.4AI score0.00293EPSS
SaveExploits0References7
OpenVAS
OpenVAS
•added 2025/07/11 12:00 a.m.•10 views

Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2025-1790)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.00444EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/07/11 12:00 a.m.•5 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2025-1797)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.00593EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2025/07/11 12:00 a.m.•6 views

Huawei EulerOS: Security Advisory for libxkbfile (EulerOS-SA-2025-1805)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00438EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/07/11 12:00 a.m.•9 views

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2025-1806)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.2AI score0.0059EPSS
SaveExploits2References2
Rows per page
Query Builder