Lucene search
+L

351 matches found

Positive Technologies
Positive Technologies
added 2022/09/06 12:0 a.m.13 views

PT-2022-6254 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux Kernel version 6.0-rc2 Description: The issue is related to the use of memory after it has been freed, specifically within the nft osf eval function. This can allow an attacker to disclose sensitive information on affected installations...

8.8CVSS7.9AI score0.10458EPSS
Exploits36References302
Positive Technologies
Positive Technologies
added 2022/08/25 12:0 a.m.4 views

PT-2022-23406 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A stack overflow issue was discovered in the setDiagnosisCfg function, which can be exploited. Recommendations: For TOTOLINK N350RT version 9.3.5u.6139 B20201216, as a temporary...

7.8CVSS7.7AI score0.00331EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/08/25 12:0 a.m.4 views

PT-2022-23419 · H3C · H3C Magic Nx18 Plus

Name of the Vulnerable Software and Affected Versions: H3C Magic NX18 Plus version NX18PV100R003 Description: A stack overflow issue was discovered in the function Edit BasicSSID 5G. Recommendations: For version NX18PV100R003, as a temporary workaround, consider disabling the Edit BasicSSID 5G...

7.8CVSS7.7AI score0.00764EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/08/25 12:0 a.m.8 views

PT-2022-23416 · H3C · H3C Magic Nx18 Plus

Name of the Vulnerable Software and Affected Versions: H3C Magic NX18 Plus version NX18PV100R003 Description: A stack overflow issue was discovered via the function edditactionlist. Recommendations: For H3C Magic NX18 Plus version NX18PV100R003, as a temporary workaround, consider disabling the...

7.8CVSS7.8AI score0.00498EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/08/10 12:0 a.m.7 views

PT-2022-4105 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.16.1 and later Cisco Firepower Threat Defense FTD Software versions 7.0.0 and later Description: A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security...

7.5CVSS7.6AI score0.16647EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2022/08/05 12:0 a.m.9 views

PT-2022-19150 · Unknown +1 · Freshtomato +1

Name of the Vulnerable Software and Affected Versions: FreshTomato version 2022.1 Description: A memory corruption issue exists in the httpd unescape functionality. This can be triggered by a specially-crafted HTTP request, leading to memory corruption. An attacker can exploit this by sending a...

9.8CVSS5.5AI score0.01399EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/07/19 12:0 a.m.7 views

PT-2022-5480 · Tp Link · Tp-Link Tl-Wr841N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR841N versions TL-WR841NUS V14 220121 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N routers. Although authentication is required to exploit this...

8CVSS6.9AI score0.00603EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/05/31 12:0 a.m.6 views

PT-2022-20430 · Apache +3 · Apache Tika +3

Name of the Vulnerable Software and Affected Versions: Apache Tika versions 1.x through 1.28.2 Description: A denial of service issue exists due to a regular expression in the StandardsText class, used by the StandardsExtractingContentHandler, which can lead to backtracking on a specially crafted...

5.5CVSS5AI score0.02926EPSS
Exploits0References44
Positive Technologies
Positive Technologies
added 2022/05/20 12:0 a.m.4 views

PT-2022-19451

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.9.0 TensorFlow versions prior to 2.8.1 TensorFlow versions prior to 2.7.2 TensorFlow versions prior to 2.6.4 Description The implementation of tf.raw ops.LoadAndRemapMatrix does not fully validate the input...

5.5CVSS6.2AI score0.00317EPSS
Exploits1References17
Positive Technologies
Positive Technologies
added 2022/04/11 12:0 a.m.10 views

PT-2022-17522 · Autodesk · Autodesk Fbx Review

Name of the Vulnerable Software and Affected Versions: Autodesk FBX Review versions 1.5.2 and prior Description: An Out-Of-Bounds Read issue may lead to code execution or information disclosure through maliciously crafted ActionScript Byte Code ABC files. These ABC files, created by the Flash...

7.8CVSS7.6AI score0.01087EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/03/22 12:0 a.m.5 views

PT-2022-2681 · Pjsip +4 · Pjsip +4

Name of the Vulnerable Software and Affected Versions: PJSIP versions 2.12 and prior Description: The issue is related to a stack buffer overflow vulnerability in the PJSIP multimedia communication library, specifically affecting users of PJSUA2 or those who call the API endpoints pjmedia sdp pri...

9.8CVSS9AI score0.16406EPSS
Exploits2References115
Positive Technologies
Positive Technologies
added 2022/03/14 12:0 a.m.17 views

PT-2022-5912 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.16-rc6 Description: An issue in the Linux kernel is related to a null pointer dereference in the netvsc get ethtool stats function in drivers/net/hyperv/netvsc drv.c. This occurs due to a lack of check of the...

9.8CVSS7.4AI score0.67994EPSS
Exploits205References1441
Positive Technologies
Positive Technologies
added 2022/03/03 12:0 a.m.7 views

PT-2022-4363 · Frrouting +3 · Frrouting +3

Name of the Vulnerable Software and Affected Versions: FRRouting versions through 8.1.0 Description: The issue is related to buffer overflow vulnerabilities due to incorrect checks on the subtlv length in the functions parse hello subtlv, parse ihu subtlv, and parse update subtlv in...

10CVSS8AI score0.02152EPSS
Exploits9References100
Positive Technologies
Positive Technologies
added 2022/02/24 12:0 a.m.7 views

PT-2022-15683 · Cybonet · Pineapp Mail Relay

Name of the Vulnerable Software and Affected Versions: Cybonet - PineApp Mail Relay affected versions not specified Description: The issue concerns an unauthenticated SQL injection vulnerability. An attacker can send a request to specific API endpoints, such as...

9.8CVSS9.9AI score0.01033EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2022/02/04 12:0 a.m.8 views

PT-2022-12382 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version 4.1.5cu.470 B20200911 Description: A stack overflow was discovered in the setWiFiWpsStart function, allowing attackers to cause a Denial of Service DoS via the pin parameter. Recommendations: For TOTOLINK A720R version...

9.8CVSS9.5AI score0.01363EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/02/01 12:0 a.m.7 views

PT-2022-16536 · Itext · Itext

Name of the Vulnerable Software and Affected Versions: iText version 7.1.17 Description: The issue allows attackers to cause a Denial of Service DoS via a crafted PDF file, exploiting an out-of-bounds exception in the ARCFOUREncryption.encryptARCFOUR component. The vendor does not view this as a...

6.5CVSS5.3AI score0.00547EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2022/01/14 12:0 a.m.3 views

PT-2022-12507 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8.90 Description: The issue is related to an Use-After-Free vulnerability in the rec record destroy function at rec-record.c. This vulnerability can lead to a segmentation fault or application crash. Recommendations: Fo...

8.8CVSS6.6AI score0.0189EPSS
Exploits13References44
Positive Technologies
Positive Technologies
added 2022/01/14 12:0 a.m.4 views

PT-2022-12508 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8.90 Description: The issue is related to an Use-After-Free vulnerability in the rec mset elem destroy function at rec-mset.c. This vulnerability can lead to a segmentation fault or application crash. Recommendations: F...

8.8CVSS6.6AI score0.0189EPSS
Exploits13References44
Positive Technologies
Positive Technologies
added 2022/01/07 12:0 a.m.3 views

PT-2022-12528 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Pointer Dereference issue exists via the gf hinter finalize function. This issue allows for potential exploitation. No information is provided about the estimated number of affected devices or real-world...

9.8CVSS7.5AI score0.04615EPSS
Exploits98References239
Positive Technologies
Positive Technologies
added 2022/01/01 12:0 a.m.11 views

PT-2025-8437

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the scsi: lpfc component. The issue occurs when an external loopback plug is inserted and then removed, followed ...

5.5CVSS6.2AI score0.00216EPSS
Exploits0
Rows per page
Query Builder