Lucene search
+L

200518 matches found

Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.24 views

PT-2026-58638

Name of the Vulnerable Software and Affected Versions Windows RDP affected versions not specified Description An authorized attacker can disclose information over a network due to the use of an uninitialized resource. This issue allows attackers to obtain sensitive information and affect the...

6.5CVSS6.1AI score0.00953EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.22 views

PT-2026-58145

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Insufficient granularity of access control in the Windows StateRepository API allows an authorized attacker to elevate privileges locally. Recommendations Apply the July patch to resolve this...

7.8CVSS5.8AI score0.02797EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.15 views

PT-2026-58293

Name of the Vulnerable Software and Affected Versions Mojolicious versions 4.59 through 9.47 Description The software exposes a stable representation of the session CSRF token to a BREACH compression oracle. This occurs because the csrf token function generates and caches one token per session,...

9.1CVSS6.1AI score0.00255EPSS
SaveExploits0References20
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.17 views

PT-2026-58302

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network. This issue enables remote attackers to skip the...

4.2CVSS6.1AI score0.00236EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.25 views

PT-2026-58123

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Bluetooth Port Driver. This issue allows an unauthorized attacker located on an adjacent network to execute arbitrary code and...

8.8CVSS6.5AI score0.00339EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.21 views

PT-2026-58329

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description A use-after-free flaw in the Windows Runtime allows an authorized network user to elevate their privileges to administrator level. Use-after-free is a memory corruption issue that occurs...

8.5CVSS6.3AI score0.00502EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.29 views

PT-2026-58275

Name of the Vulnerable Software and Affected Versions Windows Print Spooler affected versions not specified Description Concurrent execution using shared resource with improper synchronization race condition in Windows Print Spooler Components allows an authorized attacker to execute arbitrary co...

8.8CVSS6.2AI score0.00425EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.30 views

PT-2026-58714

Name of the Vulnerable Software and Affected Versions .NET versions 8 through 10 .NET Framework affected versions not specified Description An issue exists where resources are allocated without limits or throttling, allowing an unauthenticated attacker to drain system resources over a network and...

9.8CVSS6.1AI score0.00634EPSS
SaveExploits0References45
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.19 views

PT-2026-58375

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A use after free flaw in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally, enabling a user with...

7CVSS6AI score0.002EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.28 views

PT-2026-58141

Name of the Vulnerable Software and Affected Versions Microsoft Printer Drivers affected versions not specified Description A use-after-free condition exists in Microsoft Printer Drivers. This issue allows an authorized attacker with local access to elevate their privileges on the system...

7.8CVSS5.9AI score0.0024EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.30 views

PT-2026-58424

Name of the Vulnerable Software and Affected Versions Windows 10 Windows 11 Windows Server versions 2012 through 2025 Description A heap-based buffer overflow exists in Windows Message Queuing MSMQ, a service used for asynchronous communication between applications. This flaw allows an unauthoriz...

9.8CVSS6.5AI score0.00908EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.23 views

PT-2026-58236

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. A heap-based buffer overflow occurs when a program writes...

9.8CVSS6.3AI score0.00545EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.21 views

PT-2026-58870

Name of the Vulnerable Software and Affected Versions Grav Login Plugin versions prior to 3.8.11 Description The Grav Login plugin allows a top-level GET request to be sent to the task URI parameter via the TaskServiceProvider without requiring a login-form nonce, an Origin check, or a Referer...

5.4CVSS5.2AI score0.00136EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.30 views

PT-2026-58187

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Direct affected versions not specified Description An integer overflow or wraparound issue exists in Windows Storage Spaces Direct. This flaw allows an unauthorized attacker with physical access to the system to execute...

7.2CVSS6.3AI score0.00327EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.17 views

PT-2026-57958

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...

6.5CVSS6.3AI score0.00288EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/07/14 12:00 a.m.17 views

CVE-2026-56170

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

7.5CVSS5.5AI score0.01008EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.24 views

PT-2026-58806

Name of the Vulnerable Software and Affected Versions .NET versions prior to 8.0.29 .NET versions prior to 9.0.18 .NET versions prior to 10.0.10 Description An issue exists where the allocation of resources occurs without limits or throttling, allowing an unauthorized attacker to cause a denial o...

7.5CVSS6.1AI score0.0084EPSS
SaveExploits0References45
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:00 a.m.15 views

EulerOS 2.0 SP10 : libssh2 (EulerOS-SA-2026-2659)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...

9.1CVSS6.9AI score0.00466EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.19 views

PT-2026-58155

Name of the Vulnerable Software and Affected Versions Windows Clipboard Server affected versions not specified Description A race condition occurs in the Windows Clipboard Server due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges...

7CVSS7AI score0.00153EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.16 views

PT-2026-58191

Name of the Vulnerable Software and Affected Versions Windows Server affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges locally, effectively turning a basic login into a mechanism for privilege escalation. Recommendations Deploy...

7.8CVSS6.1AI score0.00242EPSS
SaveExploits0References8
Rows per page
Query Builder