Lucene search
+L

554755 matches found

Positive Technologies
Positive Technologies
added 4 days ago3 views

PT-2026-70167

n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated user with permission to create or modify workflows can craft expressions using arrow-function bodies to bypass the expression sandbox, triggering system command execution on the...

8.7CVSS5.6AI score0.00371EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 4 days ago2 views

PT-2026-70359

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.36.0, the jwtAuthCheck function in server/auth/TokenManager.js treats JWTs with the refresh token type as bearer access tokens on API and WebSocket resource endpoints such as /api/me instead of restricting them to...

5.3CVSS5.3AI score0.00267EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 4 days ago2 views

PT-2026-70112

A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local user by username. The SCIM user inges...

8.8CVSS5.3AI score0.00292EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 4 days ago3 views

PT-2026-70929

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decode pointer inplace function within cJSON Utils.c that allows unauthenticated attackers to cause JSON Patch operations to target wrong object keys by supplying crafted JSON Pointer escape...

8.7CVSS5.3AI score0.00258EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 4 days ago2 views

PT-2026-70902

CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the read websocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USE ZLIB and MG EXPERIMENTAL INTERFACES are defined. Attackers can...

8.3CVSS5.8AI score0.00467EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 4 days ago3 views

PT-2026-70224

Name of the Vulnerable Software and Affected Versions Tesseract versions prior to 5.5.3 Description A heap out-of-bounds write can occur during OCR recognition when a crafted .traineddata LSTM model component is loaded through the deserializer. This happens because an unchecked signed integer...

6.8CVSS5.2AI score0.00126EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 4 days ago4 views

PT-2026-70199

Craft CMS versions = 5.0.0-RC1 before 5.10.7 and = 4.0.0-RC1 before 4.18.3 contain a remote code execution vulnerability in the Twig sandbox mechanism. Because Craft marks the ElementInterface as safe via the AllowedInSandbox attribute and the sandbox allowlisting extends to the entire class...

8.8CVSS6.4AI score0.00539EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 4 days ago2 views

PT-2026-70197

Craft CMS 5.0.0-RC1 before 5.10.6 and 4.0.0-RC1 before 4.18.2 contain an arbitrary file read vulnerability. The create Twig function restricts class instantiation using a 5-entry blocklist that does not include SplFileObject, allowing an authenticated administrator with allowAdminChanges=true to...

8.7CVSS5.5AI score0.00218EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 4 days ago9 views

CVE-2026-68212

In the Linux kernel, the following vulnerability has been resolved: media: saa7134: Fix a possible memory leak in saa7134videoinit1 In saa7134videoinit1, the return value of the first saa7134pgtablealloc is not checked. If it fails, the function continues as if successful, leaving the driver with...

5.4AI score0.00209EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 4 days ago8 views

CVE-2026-68088

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to response query Add variable representations for BufLength and BufOffset in rndisqueryresponse, and perform a length check on them. This is identical to how rndissetresponse handle...

5.4AI score0.00176EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 4 days ago6 views

CVE-2026-68175

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix resource leak on mmiotrace tracepipe close The mmiotrace tracer was added May 12th 2008. At that time, resources created in pipeopen could not be freed because there was not pipeclose function pointer of the tracer...

5.3AI score0.002EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 4 days ago3 views

PT-2026-70148

Name of the Vulnerable Software and Affected Versions Intelliants Subrion CMS versions prior to 4.2.2 Description An authenticated administrator can delete arbitrary files on the server through the admin panel file deletion endpoint. This occurs because the endpoint passes a user-supplied file pa...

6.5CVSS5.4AI score0.00325EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 4 days ago1 views

PT-2026-70150

Name of the Vulnerable Software and Affected Versions Pinry versions prior to 2.1.14 Description A server-side request forgery SSRF issue exists in the pin-from-URL feature. This occurs because the application passes a user-supplied URL directly to the requests.get function without validating the...

7.5CVSS5.5AI score0.00283EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 4 days ago1 views

PT-2026-70261

Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access...

8.3CVSS6.1AI score0.00388EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 4 days ago1 views

PT-2026-70101

Name of the Vulnerable Software and Affected Versions cti-transmute affected versions not specified Description The software improperly handles conversion-table values within the search highlighting feature. The highlight function either returns underlying text directly when no search query is...

5.1CVSS5.2AI score0.00247EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 4 days ago1 views

PT-2026-70099

Name of the Vulnerable Software and Affected Versions cti-transmute affected versions not specified Description An issue exists where a tag's icon value can be stored and subsequently interpolated into HTML using Vue's v-html directive. The mapIcon function previously constructed an HTML string...

5.1CVSS5.4AI score0.00234EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 4 days ago2 views

PT-2026-70140

Name of the Vulnerable Software and Affected Versions Ghost Foundation Ghost versions 5.x Description An issue with broken access control allows authenticated users with the Author role to delete posts belonging to other users. This occurs because the permissible function in the post model lacks ...

8.1CVSS5.2AI score0.0021EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 4 days ago1 views

PT-2026-70873

telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...

8.7CVSS5.6AI score0.00364EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 4 days ago2 views

PT-2026-70201

Craft CMS versions = 5.0.0-RC1 before 5.10.6 and = 4.0.0-RC1 before 4.18.2 contain a theoretical path traversal weakness in the ensurePathIsContained function of the Local file system class. The order of operations validates the path before normalization, so normalization could invalidate prior...

6.9CVSS5.2AI score0.00148EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 4 days ago44 views

Zoom Workplace VDI Client < 7.0.11 Vulnerability (ZSB-26017)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 7.0.11. It is, therefore, affected by a vulnerability as referenced in the ZSB-26017 advisory. - Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code...

8.3CVSS6.2AI score0.00388EPSS
SaveExploits0References2
Rows per page
Query Builder