Lucene search
+L

3196 matches found

Positive Technologies
Positive Technologies
added 2025/07/15 12:0 a.m.8 views

PT-2025-29682 · Unknown · Gpt-Sovits-Webui

Name of the Vulnerable Software and Affected Versions: GPT-SoVITS-WebUI versions 20250228v3 and prior Description: GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. An unsafe deserialization issue exists in the inference webui.py file. The application takes user input via the gpt...

9.8CVSS6.2AI score0.00639EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2025/07/15 12:0 a.m.5 views

PT-2025-29627 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 Oracle WebLogic Server versions 14.1.1.0.0 Oracle WebLogic Server versions 14.1.2.0.0 Description: An easily exploitable issue exists in the Oracle WebLogic Server Core component, allowing an...

4CVSS7.2AI score0.00157EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/07/15 12:0 a.m.5 views

PT-2025-29541 · Unknown · Crosseditor4

Name of the Vulnerable Software and Affected Versions: CrossEditor4 versions 4.0.0.01 through 4.6.0.23 Description: The improper default setting in the API modules of CrossEditor4 potentially allows Stored Cross-Site Scripting XSS. Stored XSS is a type of security issue where malicious scripts ar...

4.3CVSS5.1AI score0.00204EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/07/15 12:0 a.m.13 views

PT-2025-29649

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description This issue affects the InnoDB component of Oracle MySQL Server. Successful exploitation can lead to a...

7.5CVSS5AI score0.01287EPSS
Exploits2References310
Positive Technologies
Positive Technologies
added 2025/07/15 12:0 a.m.11 views

PT-2025-29621 · Oracle · Oracle Database 23.4 +8

Name of the Vulnerable Software and Affected Versions: Oracle Database versions 19.3 through 19.27 Oracle Database versions 21.3 through 21.18 Oracle Database versions 23.4 through 23.8 Description: This issue affects the Oracle Database Materialized View component. A highly privileged attacker...

4CVSS7.2AI score0.00256EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/07/15 12:0 a.m.8 views

PT-2025-29610 · Oracle · Oracle Jd Edwards +1

Name of the Vulnerable Software and Affected Versions: Oracle JD Edwards versions 9.2.0.0 through 9.2.9.3 Description: This issue affects the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools. A low-privileged attacker with network access via HTTP can compromise the system,...

5.5CVSS7AI score0.0021EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/07/15 12:0 a.m.3 views

PT-2025-29639

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description This issue affects the Server: Components Services component of Oracle MySQL. A high-privileged attacker...

7.5CVSS5.1AI score0.01287EPSS
Exploits2References311
Positive Technologies
Positive Technologies
added 2025/07/14 12:0 a.m.9 views

PT-2025-29425 · Unknown · Zavy86 Wikidocs

Name of the Vulnerable Software and Affected Versions: Zavy86 WikiDocs versions through 1.0.77 Description: A critical issue exists in Zavy86 WikiDocs that allows for path traversal. The vulnerability is located in the image drop upload ajax/image delete ajax function within the submit.php file...

5.8CVSS4.7AI score0.00396EPSS
Exploits0References13
Positive Technologies
Positive Technologies
added 2025/07/14 12:0 a.m.5 views

PT-2025-29404 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU hardware to write to arbitrary physical memory pages. This could potentially corrup...

7.8CVSS6AI score0.00132EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/07/14 12:0 a.m.5 views

PT-2025-29488 · Yijiusmile · Kkfileviewofficeedit

Name of the Vulnerable Software and Affected Versions: YiJiuSmile kkFileViewOfficeEdit affected versions not specified Description: A critical issue exists in the Download function of the /download API endpoint in YiJiuSmile kkFileViewOfficeEdit. Manipulation of the url argument can lead to a pat...

5.3CVSS4.8AI score0.00464EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/07/14 12:0 a.m.7 views

PT-2025-29456 · Phpgurukul · Phpgurukul Online Library Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Library Management System version 3.0 Description: A critical issue exists in PHPGurukul Online Library Management System 3.0, specifically within the /admin/student-history.php file. Manipulation of the stdid argument can...

8.8CVSS6.6AI score0.00315EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2025/07/14 12:0 a.m.5 views

PT-2025-29402 · Code Projects · Voting System

Name of the Vulnerable Software and Affected Versions: code-projects Voting System version 1.0 Description: A critical issue exists in an unknown functionality of the file /admin/voters row.php. The manipulation of the ID argument leads to SQL injection. The attack can be launched remotely. The...

8.8CVSS6.8AI score0.00318EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2025/07/13 12:0 a.m.8 views

PT-2025-29359 · Code Projects · Online Appointment Booking System

Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical vulnerability exists in code-projects Online Appointment Booking System. The vulnerability is due to a SQL injection flaw within the /cancelbookingpatient.php...

9.8CVSS7.4AI score0.00394EPSS
Exploits1References11
Positive Technologies
Positive Technologies
added 2025/07/13 12:0 a.m.6 views

PT-2025-29386 · Code Projects · Online Appointment Booking System

Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical issue exists in code-projects Online Appointment Booking System. The vulnerability is located in the /get town.php file and involves SQL injection through...

9.8CVSS7.6AI score0.00454EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2025/07/12 12:0 a.m.6 views

PT-2025-29290 · Apache · Apache Sentry

Name of the Vulnerable Software and Affected Versions: Apache Sentry affected versions not specified Description: An authenticated user enrolled device may access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. This does not...

6.8CVSS6.4AI score0.0083EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/07/12 12:0 a.m.5 views

PT-2025-29333 · Phpgurukul · Phpgurukul Vehicle Parking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Vehicle Parking Management System version 1.13 Description: A critical issue exists in PHPGurukul Vehicle Parking Management System version 1.13. The vulnerability is located in an unknown part of the /users/profile.php file...

8.8CVSS6.7AI score0.00318EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2025/07/12 12:0 a.m.9 views

PT-2025-29324 · Oracle · Primavera P6 Enterprise Project Portfolio Management

Name of the Vulnerable Software and Affected Versions: Oracle Primavera P6 Enterprise Project Portfolio Management versions 20.12.0 through 20.12.21 Oracle Primavera P6 Enterprise Project Portfolio Management versions 21.12.0 through 21.12.21 Oracle Primavera P6 Enterprise Project Portfolio...

5.5CVSS7AI score0.00187EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/07/11 12:0 a.m.9 views

PT-2025-29207 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The reported issue has been rejected as not used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

6.4AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/07/11 12:0 a.m.11 views

PT-2025-29322 · Ibm · Ibm Storage Scale

Name of the Vulnerable Software and Affected Versions: IBM Storage Scale versions 5.2.3.0 and 5.2.3.1 Description: IBM Storage Scale versions 5.2.3.0 and 5.2.3.1 may allow an authenticated user to obtain sensitive information from files due to insecure permissions inherited through the SMB...

6.8CVSS5.8AI score0.00249EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/07/11 12:0 a.m.6 views

PT-2025-29270 · Unknown · Hax Cms Php +1

Name of the Vulnerable Software and Affected Versions: haxcms-nodejs versions prior to 11.0.6 haxcms-php versions prior to 11.0.6 Description: The logout function does not properly terminate user sessions or clear cookies. A refresh token is issued during logout, potentially allowing continued...

6.5CVSS6.5AI score0.00166EPSS
Exploits0References7
Rows per page
Query Builder