Lucene search
+L

1140 matches found

Positive Technologies
Positive Technologies
added 2024/12/03 12:0 a.m.6 views

PT-2024-36947

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0 Description A vulnerability in the Linux kernel has been resolved, related to the High-availability Seamless Redundancy HSR protocol. The issue arises from the hsr init skb function not allocating sufficie...

7.8CVSS6.5AI score0.00597EPSS
SaveExploits0References342
Positive Technologies
Positive Technologies
added 2024/11/30 12:0 a.m.9 views

PT-2024-35883 · Sergio Micó · Simpleschema

Name of the Vulnerable Software and Affected Versions: SimpleSchema versions through 1.7.6.9 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS. A Cross-site Scripting XSS...

6.5CVSS8.3AI score0.00283EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/11/29 12:0 a.m.7 views

PT-2024-35439 · Dcme-320 +3 · Dcme-320 +3

Name of the Vulnerable Software and Affected Versions: DCME-320 versions prior to 7.4.12.90 DCME-520 versions prior to 9.25.5.11 DCME-320-L versions prior to 9.3.5.26 DCME-720 versions prior to 9.1.5.11 Description: The issue allows for Remote Code Execution and Privilege Escalation via the...

9.8CVSS7.6AI score0.00692EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/11/28 12:0 a.m.8 views

PT-2024-16315 · WordPress · Element Pack Elementor Addons

Name of the Vulnerable Software and Affected Versions: Element Pack Elementor Addons plugin for WordPress versions prior to 5.10.3 Description: The issue concerns the Element Pack Elementor Addons plugin for WordPress, which does not validate and escape some of its block options before outputting...

5.4CVSS8.2AI score0.00349EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2024/11/28 12:0 a.m.5 views

PT-2024-9682

Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.16 Django versions 5.0 through 5.0.9 Django versions 5.1 through 5.1.3 Description The issue is related to the strip tags method and the striptags template filter in Django, which are subject to a potential...

7.8CVSS7AI score0.01398EPSS
SaveExploits0References178
Positive Technologies
Positive Technologies
added 2024/11/26 12:0 a.m.5 views

PT-2024-39171 · Cri-O · Cri-O

Name of the Vulnerable Software and Affected Versions: CRI-O versions prior to 1.29.11 CRI-O versions 1.30.0 through 1.30.8 CRI-O versions 1.31.0 through 1.31.3 Description: A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be aske...

8.1CVSS7.2AI score0.03001EPSS
SaveExploits3References45
Positive Technologies
Positive Technologies
added 2024/11/21 12:0 a.m.8 views

PT-2024-39622 · WordPress · Gmw-Premium-Settings +1

Name of the Vulnerable Software and Affected Versions: GEO my WP WordPress plugin versions prior to 4.5 gmw-premium-settings WordPress plugin versions prior to 3.1 Description: The issue is related to insufficient validation of files to be uploaded, which could allow attackers to upload arbitrary...

6.6CVSS6.7AI score0.00733EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2024/11/20 12:0 a.m.1 views

PT-2024-9308 · Drupal · Drupal Core

Name of the Vulnerable Software and Affected Versions: Drupal Core versions 8.0.0 through 10.2.10 Drupal Core versions 10.3.0 through 10.3.8 Drupal Core versions 11.0.0 through 11.0.7 Description: The issue is related to the deserialization of untrusted data, which allows object injection. This c...

10CVSS7.7AI score0.00904EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
added 2024/11/20 12:0 a.m.1 views

PT-2024-9307 · Drupal · Drupal Core

Name of the Vulnerable Software and Affected Versions: Drupal Core versions 8.0.0 through 10.2.10 Drupal Core versions 10.3.0 through 10.3.8 Drupal Core versions 11.0.0 through 11.0.7 Description: The issue is related to the deserialization of untrusted data, which allows object injection. This c...

10CVSS9.7AI score0.00803EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
added 2024/11/20 12:0 a.m.4 views

PT-2024-9380 · Drupal · Drupal Core

Name of the Vulnerable Software and Affected Versions: Drupal Core versions 8.0.0 through 10.2.11 Drupal Core versions 10.3.0 through 10.3.9 Drupal Core versions 11.0.0 through 11.0.8 Description: A vulnerability in Drupal Core allows privilege escalation. This issue is related to inconsistencies...

8.5CVSS6.1AI score0.00408EPSS
SaveExploits0References20
Positive Technologies
Positive Technologies
added 2024/11/20 12:0 a.m.4 views

PT-2024-9323 · Drupal +1 · Drupal Core +1

Name of the Vulnerable Software and Affected Versions: Drupal Core versions 7.0 through 7.101 Drupal Core versions 8.0.0 through 10.2.10 Drupal Core versions 10.3.0 through 10.3.8 Description: The issue is related to the deserialization of untrusted data, which allows object injection. This can...

10CVSS9.8AI score0.00956EPSS
SaveExploits0References19
Positive Technologies
Positive Technologies
added 2024/11/19 12:0 a.m.10 views

PT-2024-35201 · Ibm · Ibm Concert

Name of the Vulnerable Software and Affected Versions: IBM Concert Software versions 1.0.0 through 1.0.2.1 Description: The issue allows an authenticated user to perform unauthorized actions that should be reserved for administrators due to improper access controls. Recommendations: For versions...

8.8CVSS4.3AI score0.00302EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/11/18 12:0 a.m.8 views

PT-2024-35487

Name of the Vulnerable Software and Affected Versions Bitcoin Core versions prior to 22.0 Bitcoin Core versions 27.x Description The issue is caused by an integer overflow in CAddrMan's nIdCount via a flood of addr messages, leading to an assertion failure and daemon exit. This can be exploited t...

6.5CVSS7.1AI score0.00266EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2024/11/15 12:0 a.m.8 views

PT-2024-8904

Name of the Vulnerable Software and Affected Versions: PHP versions 8.1. through 8.1.30 PHP versions 8.2. through 8.2.25 PHP versions 8.3. through 8.3.13 Description: The issue is related to the ldap escape function in PHP, which can cause an integer overflow when given uncontrolled long string...

9.8CVSS8.6AI score0.99987EPSS
SaveExploits79References181
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.5 views

PT-2024-8141 · Postgresql +6 · Postgresql +6

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions prior to 17.1 PostgreSQL versions prior to 16.5 PostgreSQL versions prior to 15.9 PostgreSQL versions prior to 14.14 PostgreSQL versions prior to 13.17 PostgreSQL versions prior to 12.21 Description: The issue is related t...

8.8CVSS6.2AI score0.04422EPSS
SaveExploits1References155
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.8 views

PT-2024-8138

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions prior to 17.1 PostgreSQL versions prior to 16.5 PostgreSQL versions prior to 15.9 PostgreSQL versions prior to 14.14 PostgreSQL versions prior to 13.17 PostgreSQL versions prior to 12.21 Description: The issue is related t...

9CVSS8.4AI score0.9003EPSS
SaveExploits12References235
Positive Technologies
Positive Technologies
added 2024/11/13 12:0 a.m.13 views

PT-2024-16390 · WordPress · Wpforms

Name of the Vulnerable Software and Affected Versions: WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress versions up to, and including, 1.9.1.6 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect...

4.3CVSS9AI score0.00276EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2024/11/09 12:0 a.m.3 views

PT-2024-34053 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: A memory management issue in the Linux kernel has been identified, which can be exploited under memory pressure. The estimated number of potentially affected devices is not specified...

9.8CVSS7.6AI score0.01483EPSS
SaveExploits4References698
Positive Technologies
Positive Technologies
added 2024/11/05 12:0 a.m.5 views

PT-2025-11661

Name of the Vulnerable Software and Affected Versions Synology BeeStation Manager BSM versions prior to 1.1-65374 Synology DiskStation Manager DSM versions prior to 6.2.4-25556-8 Synology DiskStation Manager DSM versions prior to 7.1.1-42962-7 Synology DiskStation Manager DSM versions prior to...

5.3CVSS6.7AI score0.26952EPSS
SaveExploits0References33
Positive Technologies
Positive Technologies
added 2024/11/05 12:0 a.m.10 views

PT-2025-11662

Name of the Vulnerable Software and Affected Versions Synology Drive Server versions prior to 3.0.4-12699 Synology Drive Server versions prior to 3.2.1-23280 Synology Drive Server versions prior to 3.5.0-26085 Synology Drive Server versions prior to 3.5.1-26102 Description The issue is related to...

7.8CVSS7AI score0.22718EPSS
SaveExploits0References15
Rows per page
Query Builder