Lucene search
+L

6778 matches found

Positive Technologies
Positive Technologies
added 2025/10/30 12:00 a.m.19 views

PT-2025-44503

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.2 Description Nagios XI versions prior to 2024R1.2 have a privilege escalation issue related to how NagVis configuration data specifically, nagvis.conf is handled. An authenticated user may be able to gain...

8.8CVSS7AI score0.01035EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/10/30 12:00 a.m.7 views

PT-2025-44372

Name of the Vulnerable Software and Affected Versions Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue plugin for WordPress versions prior to 1.48 Description The software is susceptible to log file poisoning, allowing unauthenticated attackers to insert arbitrary content...

6.5CVSS6.6AI score0.00322EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/10/29 9:12 p.m.16 views

CVE-2025-62796

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Versions 1.7.7 through 2.0.1 allow persistent HTML injection via the unsanitized attachment filename attachmentname when attachments are enabled. An attacker can modify attachmentname before encryption so that,...

5.8CVSS7.3AI score0.00273EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/29 12:00 a.m.12 views

PT-2025-44285

Name of the Vulnerable Software and Affected Versions Jenkins Themis Plugin versions 1.4.1 and earlier Description A cross-site request forgery CSRF issue exists in Jenkins Themis Plugin. This allows attackers to potentially connect to an HTTP server specified by the attacker. A CSRF attack...

4.3CVSS6.5AI score0.00211EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/10/29 12:00 a.m.18 views

PT-2025-44290

Name of the Vulnerable Software and Affected Versions Jenkins Nexus Task Runner Plugin versions 0.9.2 and earlier Description A cross-site request forgery CSRF issue exists in the Jenkins Nexus Task Runner Plugin. This allows attackers to connect to a URL specified by the attacker, using...

4.3CVSS6.5AI score0.00195EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2025/10/29 12:00 a.m.7 views

Google Chrome Security Update (stable-channel-update-for-desktop_28-2025-10) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS7.6AI score0.06679EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2025/10/29 12:00 a.m.12 views

PT-2025-44249

Name of the Vulnerable Software and Affected Versions TieLabs Jannah - Extensions versions through 1.1.4 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the execution of...

6.5CVSS6.5AI score0.00154EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/29 12:00 a.m.15 views

PT-2025-44252

Name of the Vulnerable Software and Affected Versions StylemixThemes MasterStudy LMS Pro versions prior to 4.7.16 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for potential exploitation. Recommendatio...

5.4CVSS6.5AI score0.00202EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/29 12:00 a.m.10 views

PT-2025-44254

Name of the Vulnerable Software and Affected Versions Business Directory versions through 6.4.18 Description A missing authorization issue exists in Strategy11 Team Business Directory business-directory-plugin. This allows exploitation due to incorrectly configured access control security levels...

4.3CVSS6.5AI score0.00181EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/29 12:00 a.m.11 views

PT-2025-44342

Name of the Vulnerable Software and Affected Versions Zitadel versions prior to 4.6.0 Zitadel versions prior to 3.4.3 Zitadel versions prior to 2.71.18 Description Zitadel, an open-source identity infrastructure software, is susceptible to online brute-force attacks targeting OTP, TOTP, and...

9.8CVSS7.7AI score0.00345EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2025/10/28 12:00 a.m.5 views

Fedora: Security Advisory (FEDORA-2025-5ce0931fe3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.8AI score0.00222EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2025/10/28 12:00 a.m.6 views

Fedora: Security Advisory (FEDORA-2025-ce67f2ffd1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.6CVSS6.8AI score0.00438EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2025/10/28 12:00 a.m.4 views

Fedora: Security Advisory (FEDORA-2025-4074af998e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8AI score
SaveExploits0References3
OpenVAS
OpenVAS
added 2025/10/28 12:00 a.m.5 views

Fedora: Security Advisory (FEDORA-2025-29c34ad84a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.8AI score0.00412EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2025/10/28 12:00 a.m.3 views

Fedora: Security Advisory (FEDORA-2025-ee1d2fee5b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.8AI score0.00761EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2025/10/28 12:00 a.m.3 views

Fedora: Security Advisory (FEDORA-2025-0d54679581)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.8AI score0.008EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2025/10/28 12:00 a.m.8 views

Fedora: Security Advisory (FEDORA-2025-59acaa6bd9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.4CVSS6.8AI score0.00401EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
added 2025/10/28 12:00 a.m.9 views

PT-2025-44201

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5 Description The software contains a local privilege escalation issue. This allows an attacker with local access to gain elevated privileges. Recommendations Update BLU-IC2 to a...

10CVSS6.8AI score0.00203EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2025/10/28 12:00 a.m.1 views

Fedora: Security Advisory (FEDORA-2025-c3e110251c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4CVSS6.8AI score0.00316EPSS
SaveExploits0References4
Kaspersky
Kaspersky
added 2025/10/28 12:00 a.m.37 views

KLA90335 DoS vulnerabilities in Google Chrome

Denial of service vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service. Original advisories Stable Channel Update for Desktop Related products Google-Chrome CVE list CVE-2025-13226 critical CVE-2025-13227 critical CVE-2025-13228...

8.8CVSS6.3AI score0.00249EPSS
SaveExploits0References3
Rows per page
Query Builder