Lucene search
+L

1747 matches found

Positive Technologies
Positive Technologies
added 2021/12/29 12:00 a.m.9 views

PT-2021-23395 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize use...

6.6CVSS5.8AI score0.00531EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2021/12/27 12:00 a.m.12 views

PT-2021-20854 · Solarwinds · Solarwinds Web Help Desk

Name of the Vulnerable Software and Affected Versions: SolarWinds Web Help Desk affected versions not specified Description: A security issue has been discovered in the SolarWinds Web Help Desk product, where hard-coded credentials allow an attacker with local access to the host machine to execut...

6.8CVSS7.7AI score0.003EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2021/12/23 12:00 a.m.7 views

PT-2021-23155 · Pypi · Pytorch-Lightning

Name of the Vulnerable Software and Affected Versions: pytorch-lightning affected versions not specified Description: The issue concerns the deserialization of untrusted data in pytorch-lightning. There is no information provided about the estimated number of potentially affected devices worldwid...

8.5CVSS7.1AI score0.00978EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
added 2021/12/22 12:00 a.m.6 views

PT-2022-2351 · Fribidi +10 · Fribidi +10

Name of the Vulnerable Software and Affected Versions: Fribidi affected versions not specified Description: The issue is caused by a stack-based buffer overflow flaw in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which can lead to...

10CVSS7.6AI score0.00535EPSS
SaveExploits3References102
Positive Technologies
Positive Technologies
added 2021/12/20 12:00 a.m.12 views

PT-2021-7004

Name of the Vulnerable Software and Affected Versions AVG Anti-Virus Free affected versions not specified AVG Internet Security affected versions not specified AVG Anti-Virus affected versions not specified Description The issue is related to insufficient access control in the aswArPot.sys driver...

6.8CVSS7.5AI score0.0025EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2021/12/19 12:00 a.m.4 views

PT-2021-24129 · Privoxy +2 · Privoxy +2

Name of the Vulnerable Software and Affected Versions: Privoxy affected versions not specified Description: A memory leak issue was discovered in Privoxy when handling errors. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

7.8CVSS7.5AI score0.02355EPSS
SaveExploits0References53
Positive Technologies
Positive Technologies
added 2021/12/18 12:00 a.m.5 views

PT-2021-23264 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is...

8.8CVSS6.5AI score0.00539EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2021/12/16 12:00 a.m.4 views

PT-2021-7150 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient access controls in Microsoft Exchange Server, which can be exploited to elevate privileges. This allows an attacker to affect the...

8.2CVSS9.3AI score0.00842EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2021/12/14 12:00 a.m.12 views

PT-2021-6343 · Unknown · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is related to incorrect code generation management in the HEVC Video Extensions codec. Exploitation of this issue may allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.02209EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2021/12/14 12:00 a.m.7 views

PT-2021-5695 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Common Log File System Driver of the Windows operating system. Exploitation of this issue ma...

7.8CVSS7.3AI score0.00632EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2021/12/14 12:00 a.m.10 views

PT-2021-5671

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description The issue is related to errors in the representation of information by the user interface, allowing an attacker to conduct a spoofing attack. This can affect the system, potentially...

5.5CVSS6.8AI score0.0198EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2021/12/14 12:00 a.m.6 views

PT-2021-5673 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to a lack of protection for service data, which could allow a remote attacker to gain unauthorized access to a device. Recommendations: At the moment...

7.8CVSS7.5AI score0.02997EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/12/14 12:00 a.m.12 views

PT-2021-6389

Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Description The issue is related to incorrect code generation management in Microsoft Office, Microsoft Excel, and Microsoft 365 packages. This allows a remote attacker to execute arbitrary code...

9.3CVSS7.5AI score0.02064EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2021/12/13 12:00 a.m.9 views

PT-2021-24130 · Privoxy +4 · Privoxy +4

Name of the Vulnerable Software and Affected Versions: Privoxy affected versions not specified Description: A cross-site scripting XSS issue was discovered in Privoxy. The problem was addressed by encoding the template name in the cgi error no template function when Privoxy is set to serve the us...

7.8CVSS7.1AI score0.02355EPSS
SaveExploits0References61
Positive Technologies
Positive Technologies
added 2021/12/10 12:00 a.m.5 views

PT-2021-6328 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to a lack of proper validation of user-input strings before they are used to execute system calls. This could allow a remote attacker to execute...

9CVSS7.4AI score0.0283EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2021/12/07 12:00 a.m.9 views

PT-2021-21497 · Huawei · Huawei Smartphone

Name of the Vulnerable Software and Affected Versions: Huawei Smartphone affected versions not specified Description: The issue is related to an Uncaught Exception, which may lead to a remote Denial of Service when successfully exploited. Recommendations: At the moment, there is no information...

7.5CVSS7.4AI score0.00867EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/12/06 12:00 a.m.4 views

PT-2021-6133 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to a Use After Free condition in the vim text editor, specifically in the ex open function located in src/ex docmd.c. This condition may allow an attacker to impact the...

9.8CVSS6.4AI score0.26583EPSS
SaveExploits118References541
Positive Technologies
Positive Technologies
added 2021/12/01 12:00 a.m.12 views

PT-2021-23939 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse affected versions not specified Description: A vulnerability in the Polls feature of Discourse allowed users to vote multiple times in a single-option poll. The issue is related to the Polls feature, but specific details about...

4.3CVSS4.2AI score0.00756EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2021/11/23 12:00 a.m.14 views

PT-2021-7299

Name of the Vulnerable Software and Affected Versions vim affected versions not specified Description The issue is related to a Heap-based Buffer Overflow in the vim text editor. This could allow an attacker to impact the confidentiality, integrity, and availability of protected information...

7.8CVSS7.1AI score0.01792EPSS
SaveExploits1References292
Positive Technologies
Positive Technologies
added 2021/11/15 12:00 a.m.4 views

PT-2021-5537 · Busybox +5 · Busybox +5

Name of the Vulnerable Software and Affected Versions: Busybox affected versions not specified Description: A use-after-free issue in Busybox's awk applet can lead to denial of service and possibly code execution when processing a crafted awk pattern in the handle special function. This can allow...

9.8CVSS7.4AI score0.32919EPSS
SaveExploits23References204
Rows per page
Query Builder