Lucene search
+L

3196 matches found

Positive Technologies
Positive Technologies
added 2025/01/06 12:0 a.m.11 views

PT-2025-2705 · Unknown · Mcdm Driver

Name of the Vulnerable Software and Affected Versions: MCDM driver affected versions not specified Description: Memory corruption occurs when invoking any application that calls IOCTL and executes all MCDM driver IOCTL calls. This issue arises due to the invocation of any IOCTL-calling applicatio...

7.8CVSS7.1AI score0.00101EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/01/05 12:0 a.m.2 views

PT-2025-1823 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: There is a request for information about a specific issue. No details are provided about the nature of the issue, potentially affected devices, ...

7AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/04 12:0 a.m.5 views

PT-2025-21645

Name of the Vulnerable Software and Affected Versions: FCGI versions 0.44 through 0.82 Description: The included FastCGI library in FCGI is affected, causing an integer overflow and resultant heap-based buffer overflow via crafted nameLen or valueLen values in data to the IPC socket. This occurs ...

9.3CVSS7.7AI score0.00566EPSS
SaveExploits1References54
Positive Technologies
Positive Technologies
added 2025/01/03 12:0 a.m.3 views

PT-2025-4297 · Unknown +1 · Siyuan Note +1

Name of the Vulnerable Software and Affected Versions: SiYuan Note version 3.1.18 Description: SiYuan Note is self-hosted, open source personal knowledge management software. The software has an arbitrary file deletion vulnerability that exists in the POST /api/history/getDocHistoryContent...

9.9CVSS6.7AI score0.75197EPSS
SaveExploits5References62
Positive Technologies
Positive Technologies
added 2025/01/03 12:0 a.m.15 views

PT-2025-1144 · Gocd · Gocd

Name of the Vulnerable Software and Affected Versions: GoCD versions prior to 24.4.0 Description: The issue is related to the incorrect restriction of XML external entity references in GoCD, a continuous delivery server. This can allow "group admins" to abuse the ability to edit raw XML...

7.1CVSS6.7AI score0.00768EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.3 views

PT-2025-25390

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A directory traversal vulnerability in the recv file method allows arbitrary files to be written to the master cache directory. Recommendations At the moment, there is no information about a...

9.6CVSS5.9AI score0.00982EPSS
SaveExploits0References155
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.7 views

PT-2025-25393

Name of the Vulnerable Software and Affected Versions SaltStack Salt affected versions not specified Description The issue concerns a directory traversal attack in minion file cache creation. The master's default cache is vulnerable to this attack, which could be leveraged to write or overwrite...

8.1CVSS6.5AI score0.0028EPSS
SaveExploits0References150
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.9 views

PT-2025-3203 · Unknown · Contest Gallery

Name of the Vulnerable Software and Affected Versions: Contest Gallery versions through 24.0.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions...

5.9CVSS8.7AI score0.0032EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.3 views

PT-2025-3340 · Unknown +1 · Net::Easytcp +1

Name of the Vulnerable Software and Affected Versions: Net::EasyTCP versions 0.15 through 0.26 Description: The issue arises because the Net::EasyTCP package for Perl utilizes Perl's built-in rand function when no strong randomization module is present. This can lead to insecure randomization...

5.4CVSS5.3AI score0.00373EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.4 views

PT-2025-2325 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. There is a mention of a rejected reason related to compliance with CNA rules,...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.3 views

PT-2025-3968

Name of the Vulnerable Software and Affected Versions No information available Description No details are provided about the issue. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

4.8CVSS5.1AI score0.00244EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.7 views

PT-2025-2362 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE record due to non-compliance with CNA...

6.9AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.9 views

PT-2025-2349 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue concerns a rejected CVE record due to non-compliance with CNA rules, as it has not been utilized. No further details are provided about the nature of the issue or i...

6.3AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.8 views

PT-2025-11346

Name of the Vulnerable Software and Affected Versions PHP versions 8.1. through 8.1.31 PHP versions 8.2. through 8.2.27 PHP versions 8.3. through 8.3.18 PHP versions 8.4. through 8.4.4 Description The issue is related to the insufficient validation of end-of-line characters in user-supplied...

9.8CVSS7AI score0.02286EPSS
SaveExploits11References160
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.7 views

PT-2025-2357 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A CVE record was rejected due to non-compliance with CNA rules because it hasn't been used. Recommendations: At the moment, there is no information about a newer version that...

6.3AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.5 views

PT-2025-2326 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE record du...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.3 views

PT-2025-27861

Name of the Vulnerable Software and Affected Versions: php7.4 php8.2 Description: The software contains package vulnerabilities. These issues were addressed in the php8-8.4.10-1.1 package on openSUSE Tumbleweed. Recommendations: Update to php8-8.4.10-1.1 on openSUSE Tumbleweed...

9.8CVSS8.5AI score0.02286EPSS
SaveExploits11References124
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.4 views

PT-2025-2329 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.9 views

PT-2025-2358 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue concerns a rejected CVE record due to unused status compliance. No further details are provided about the nature of the issue or its...

6.3AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.9 views

PT-2025-27766

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available due to unknown descriptions in the provided sources. Recommendations: At the moment, there is no information about a newer version that...

2.3CVSS5.2AI score0.00454EPSS
SaveExploits0References10
Rows per page
Query Builder