Lucene search
+L

200195 matches found

Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.4 views

PT-2026-70767

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A heap-based buffer overflow occurs in Windows DNS, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happe...

6.8CVSS7AI score0.00316EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.2 views

PT-2026-70495

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A race condition occurs in the Windows Telephony Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileg...

7CVSS5.2AI score0.00189EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.15 views

PT-2026-70493

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A heap-based buffer overflow in the Windows Telephony Service allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...

7.8CVSS5.4AI score0.00311EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70529

Name of the Vulnerable Software and Affected Versions Windows License Manager affected versions not specified Description A missing authentication flaw in a critical function allows an authorized attacker to elevate privileges locally, potentially affecting the system. Recommendations At the...

7.8CVSS5.3AI score0.00214EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.2 views

PT-2026-70754

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description Use of an uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose sensitive information locally and affect the system. Recommendations At the moment,...

5.5CVSS4.9AI score0.00359EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.6 views

PT-2026-70735

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

7.8CVSS6.3AI score0.00404EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.6 views

PT-2026-70498

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An untrusted pointer dereference in the Windows Kernel allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the...

7.8CVSS5.2AI score0.00333EPSS
SaveExploits4References5
VulnCheck KEV
VulnCheck KEV
added 2026/08/11 12:0 a.m.7 views

VulnCheck KEV: CVE-2026-68820

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS5.6AI score0.00332EPSS
SaveIn wildExploits2References10
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.4 views

PT-2026-70469

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A race condition occurs in the Windows Bind Filter Driver due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate...

7CVSS5.2AI score0.00189EPSS
SaveExploits0References5
VulnCheck KEV
VulnCheck KEV
added 2026/08/11 12:0 a.m.9 views

VulnCheck KEV: CVE-2022-50997

Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...

8.7CVSS5.9AI score0.00462EPSS
SaveIn wildExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.4 views

PT-2026-70596

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An uncaught exception in .NET allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that contains a fix for th...

7.8CVSS5.3AI score0.00288EPSS
SaveExploits0References32
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.4 views

PT-2026-70593

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An issue exists where unchecked input for a loop condition allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment, there is no information abo...

7.5CVSS5.3AI score0.01057EPSS
SaveExploits0References32
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.4 views

PT-2026-70438

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose sensitive information locally and affect the system. A heap-based buffer overflow occurs when...

5.5CVSS5.5AI score0.00372EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/11 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-72694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a...

7.1CVSS5.7AI score0.00127EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.6 views

PT-2026-70575

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A stack-based buffer overflow occurs wh...

9.8CVSS6.4AI score0.00887EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.7 views

PT-2026-70471

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free condition in the Windows Kernel allows an unauthorized attacker to elevate privileges. This issue can be exploited through a physical attack to affect the system...

6.4CVSS5.2AI score0.00316EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.6 views

PT-2026-70573

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is n...

7.8CVSS5.2AI score0.0024EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.2 views

PT-2026-70441

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description An out-of-bounds read exists that allows an unauthorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about ...

6.5CVSS5AI score0.00829EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.2 views

PT-2026-70435

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...

7.8CVSS5.4AI score0.00278EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70772

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

8.1CVSS5.2AI score0.0059EPSS
SaveExploits0References2
Rows per page
Query Builder