Lucene search
+L

369588 matches found

Positive Technologies
Positive Technologies
added 2 days ago1 views

PT-2026-71315

An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue requires connecting to an untrusted or impersonated database server that returns crafted metadata. This may result in...

8.8CVSS5.7AI score0.00364EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2 days ago1 views

PT-2026-71056

The Estatik Real Estate Plugin WordPress plugin before 4.3.4 does not validate the same recipient list that it later uses to address the message sent by its property request form, allowing unauthenticated users to send emails to arbitrary recipients with arbitrary subject, body and Reply-To on...

3.7CVSS5.4AI score0.001EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2 days ago1 views

PT-2026-71121

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server...

6.8CVSS5.4AI score0.00211EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2 days ago1 views

PT-2026-71054

The Payment Button for PayPal WordPress plugin through 1.2.3.44 does not enforce the merchant-configured price server-side and trusts a client-supplied payment amount, allowing unauthenticated attackers to create a real PayPal order against the merchant for an arbitrary lower amount...

5.3CVSS5.4AI score0.00194EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2 days ago7 views

Linux Distros Unpatched Vulnerability : CVE-2026-73078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vi...

8.6CVSS6AI score0.00336EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2 days ago3 views

Linux Distros Unpatched Vulnerability : CVE-2026-19560

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS5.8AI score0.00344EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2 days ago1 views

PT-2026-71302

A path traversal vulnerability in LXD allows an attacker to achieve arbitrary host file read or unconstrained file creation. When processing image metadata templates, LXD fails to properly sanitize or restrict template file paths from escaping the instance templates directory specifically affecti...

8.5CVSS5.8AI score0.00295EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2 days ago1 views

PT-2026-70978

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated unsanitized into HTML output via the export book method in t...

5.4CVSS5.4AI score0.00181EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2 days ago1 views

PT-2026-71115

Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user customer, reseller to execute arbitrary code on behalf of the database server administrator...

9.3CVSS5.8AI score0.00297EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2 days ago1 views

PT-2026-71147

Fujitsu Research's OneCompression library 1.2.0 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.load quantized model pt unconditionally calls torch.load with weights only=Fals...

8.4CVSS5.9AI score0.00258EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2 days ago1 views

PT-2026-71084

Prowler is a cloud security platform. Prior to 5.36.0, the Kubernetes provider connection test accepted kubeconfig content containing a legacy gcp auth-provider with config.cmd-path and config.cmd-args because kubeconfig contains exec auth in api/src/backend/api/v1/serializers.py checked only exe...

9.9CVSS5.4AI score0.00352EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2 days ago1 views

PT-2026-71321

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file...

7.8CVSS6AI score0.00147EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2 days ago1 views

PT-2026-71078

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system...

9.2CVSS5.5AI score0.00375EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2 days ago1 views

PT-2026-71197

Prompty is a markdown file format .prompty for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype propertie...

10CVSS5.4AI score0.01215EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2 days ago1 views

PT-2026-71079

Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder 6.8.0 - An unauthenticated attacker can create arbitrary directories and files with a predefined name...

6.3CVSS5.4AI score0.00384EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2 days ago1 views

PT-2026-71328

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

7.8CVSS5.7AI score0.0015EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2 days ago2 views

PT-2026-71249

SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute-view template columns that expose the queryBlocks function, which executes raw SQL using string substitution instead of parameterized queries. Attackers can distribute malicious SiYuan documents or...

8.8CVSS6AI score0.00199EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2 days ago4 views

Linux Distros Unpatched Vulnerability : CVE-2026-19559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS5.8AI score0.00344EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2 days ago4 views

Linux Distros Unpatched Vulnerability : CVE-2026-73248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled compositetemplate metadata from a malicious EPUB, OPF, PDF, or similar file...

8.5CVSS6AI score0.00149EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2 days ago5 views

Linux Distros Unpatched Vulnerability : CVE-2026-19558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute...

7.5CVSS6.1AI score0.00233EPSS
SaveExploits0References2
Rows per page
Query Builder