Lucene search
+L

1140 matches found

Positive Technologies
Positive Technologies
added 2023/09/11 12:0 a.m.15 views

PT-2023-27547 · S4Core · S4Core

Name of the Vulnerable Software and Affected Versions: S4CORE Manage Purchase Contracts App versions 102 through 107 Description: The issue is related to the lack of necessary authorization checks for authenticated users, which could allow an attacker to perform unintended actions, resulting in...

5.4CVSS5.5AI score0.00305EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/09/08 12:0 a.m.5 views

PT-2023-5379 · Isc +4 · Bind 9 +4

Name of the Vulnerable Software and Affected Versions: BIND 9 versions 9.18.0 through 9.18.18 BIND 9 versions 9.18.11-S1 through 9.18.18-S1 Description: A flaw in the networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens...

7.8CVSS7.5AI score0.02647EPSS
SaveExploits0References49
Positive Technologies
Positive Technologies
added 2023/09/06 12:0 a.m.5 views

PT-2023-28184 · Jenkins · Jenkins Frugal Testing Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Frugal Testing Plugin versions 1.1 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to connect to Frugal Testing using attacker-specified credentials, and to retrieve test IDs and names from...

3.5CVSS3.7AI score0.00271EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/09/06 12:0 a.m.9 views

PT-2023-26513 · Tp Link · Archer C9 +1

Name of the Vulnerable Software and Affected Versions: Archer C1200 versions prior to Archer C1200JP V2 230508 Archer C9 versions prior to Archer C9JP V3 230508 Description: The issue allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Recommendations: For Archer...

8.8CVSS8.9AI score0.0047EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/09/06 12:0 a.m.5 views

PT-2023-6521

Name of the Vulnerable Software and Affected Versions WireMock versions prior to 2.35.1 WireMock versions prior to 3.0.3 Description The issue is related to insufficient checking of incoming requests in WireMock, a tool for mocking HTTP services. This can allow a remote attacker to redirect POST...

5.4CVSS6.2AI score0.00469EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2023/09/06 12:0 a.m.4 views

PT-2023-7036 · Electron +1 · Electron +1

Name of the Vulnerable Software and Affected Versions: Electron versions prior to 26.0.0-beta.13 Electron versions prior to 25.5.0 Electron versions prior to 24.7.1 Electron versions prior to 23.3.13 Electron versions prior to 22.3.19 Description: The issue is related to improper code generation...

7.8CVSS7.3AI score0.01266EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2023/09/04 12:0 a.m.1 views

PT-2025-10401 · Mariadb +1 · Mariadb Server +1

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.4 through 10.4.32 MariaDB Server versions 10.5 through 10.5.23 MariaDB Server versions 10.6 through 10.6.16 MariaDB Server versions 10.7 through 10.11.6 MariaDB Server versions 11.0 through 11.0.4 MariaDB Server...

6.8CVSS4.9AI score0.00432EPSS
SaveExploits0References24
Positive Technologies
Positive Technologies
added 2023/09/03 12:0 a.m.8 views

PT-2023-21534 · Dell · Dell Alienware Command Center

Name of the Vulnerable Software and Affected Versions: Dell Alienware Command Center versions prior to 5.5.51.0 Description: The issue is related to a deserialization of untrusted data vulnerability. A local malicious user could potentially send specially crafted requests to the .NET Remoting...

7.8CVSS7.7AI score0.00268EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2023/09/01 12:0 a.m.8 views

PT-2023-25536 · Relic · Relic

Name of the Vulnerable Software and Affected Versions: RELIC versions before commit 34580d840469361ba9b5f001361cad659687b9ab Description: The issue allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling the realloc function in the bn grow...

9.8CVSS9.7AI score0.00784EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/08/29 12:0 a.m.6 views

PT-2023-4650 · Mongodb +2 · Mongodb Node.Js Driver +5

Name of the Vulnerable Software and Affected Versions: MongoDB C Driver versions 1.0.0 through 1.17.7 MongoDB PHP Driver versions 1.0.0 through 1.9.2 MongoDB Swift Driver versions 1.0.0 through 1.1.1 MongoDB Node.js Driver 3.6 versions 3.6 through 3.6.10 MongoDB Node.js Driver 4.0 versions 4.0...

8.4CVSS6.4AI score0.01103EPSS
SaveExploits0References41
Positive Technologies
Positive Technologies
added 2023/08/25 12:0 a.m.9 views

PT-2023-23902 · WordPress · A. R. Jones Featured Image Pro Post Grid

Name of the Vulnerable Software and Affected Versions: A. R. Jones Featured Image Pro Post Grid plugin versions = 5.14 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a...

7.1CVSS6.1AI score0.00382EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/08/23 12:0 a.m.4 views

PT-2023-36248 · Mozilla · Ca-Certificates-Mozilla

Name of the Vulnerable Software and Affected Versions: ca-certificates-mozilla versions prior to 2.62 Description: The issue is related to an update of Mozilla SSL root CAs to the 2.62 state. This update adds several new root CAs, including Atos TrustedRoot Root CA ECC G2 2020, Atos TrustedRoot...

7.2AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/08/23 12:0 a.m.10 views

PT-2023-23831 · WordPress · Supersoju Block Referer Spam

Name of the Vulnerable Software and Affected Versions: Supersoju Block Referer Spam plugin versions 1.1.9.4 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the Supersoj...

5.1CVSS5.5AI score0.00299EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/08/21 12:0 a.m.8 views

PT-2023-4712 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 4.1M2 through 14.10.4 XWiki Platform versions prior to 14.10.5 and 15.1RC1 Description: The issue is related to a stored XSS vulnerability that can be exploited by any registered user through their user profile by...

9CVSS5.3AI score0.78879EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2023/08/16 12:0 a.m.7 views

PT-2023-6517 · Dell · Dell Storage Integration Tools For Vmware +2

Name of the Vulnerable Software and Affected Versions: Dell Storage Integration Tools for VMware DSITV versions prior to 6.1.1 Dell Storage vSphere Client Plugin DSVCP versions prior to 6.1.1 Replay Manager for VMware RMSV versions prior to 3.1.2 Description: The issue is related to an informatio...

7.8CVSS5.1AI score0.00137EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2023/08/10 12:0 a.m.11 views

PT-2023-14210 · Intel · Intel(R) Rst

Name of the Vulnerable Software and Affected Versions: IntelR RST software versions prior to 16.8.5.1014.5 IntelR RST software versions prior to 17.11.3.1010.2 IntelR RST software versions prior to 18.7.6.1011.2 IntelR RST software versions prior to 19.5.2.1049.5 Description: The issue is related...

7.8CVSS7.6AI score0.0015EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/08/08 12:0 a.m.6 views

PT-2023-4519 · Phoenix Contact · Phoenix Contact Wp 6Xxx

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACT WP 6xxx versions prior to 4.0.10 Description: The issue exists due to the lack of measures to neutralize special elements in the software of PHOENIX CONTACT WP 6xxx web panels, which are used for management and monitoring in...

8.3CVSS7.2AI score0.00693EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/08/08 12:0 a.m.2 views

PT-2023-4560 · Adobe · Acrobat Reader +3

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.003.20244 and earlier Adobe Acrobat Reader versions 20.005.30467 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Adobe Acrobat Document Cloud Adobe Acrobat Reader Document Cloud Description: A...

5.5CVSS5.1AI score0.02597EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/08/03 12:0 a.m.11 views

PT-2023-5956 · Php +11 · Php +11

Name of the Vulnerable Software and Affected Versions: PHP versions 8.0. through 8.0.29 PHP versions 8.1. through 8.1.21 PHP versions 8.2. through 8.2.7 Description: The issue is related to the way PHP's XML functions rely on libxml global state to track configuration variables. This state can be...

9.8CVSS6.6AI score0.3786EPSS
SaveExploits11References190
Positive Technologies
Positive Technologies
added 2023/07/27 12:0 a.m.14 views

PT-2023-26468 · Kirby · Kirby

Name of the Vulnerable Software and Affected Versions: Kirby versions prior to 3.5.8.3 Kirby versions prior to 3.6.6.3 Kirby versions prior to 3.7.5.2 Kirby versions prior to 3.8.4.1 Kirby versions prior to 3.9.6 Description: A field injection vulnerability in Kirby's content storage implementati...

8.8CVSS8.6AI score0.00924EPSS
SaveExploits0References14
Rows per page
Query Builder