Lucene search
+L

203633 matches found

Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.10 views

PT-2026-70476

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Cloud Files Mini Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the...

7.8CVSS5.7AI score0.0195EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.9 views

PT-2026-70587

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description A use-after-free condition exists in Windows Deployment Services. This flaw allows an unauthorized attacker to execute arbitrary code over a network. Use-after-free is a...

9.8CVSS5.9AI score0.02732EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.9 views

PT-2026-70578

Name of the Vulnerable Software and Affected Versions Microsoft Office Outlook affected versions not specified Description Insufficiently protected credentials allow an unauthorized attacker to perform spoofing over a network. Spoofing is a technique where an attacker masquerades as another perso...

4.3CVSS5.2AI score0.00617EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.8 views

PT-2026-70196

A vulnerability has been identified in Siemens License Server SLS All versions V5.3. The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application...

8.7CVSS5.5AI score0.00472EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70560

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A race condition occurs in Windows DNS due to improper synchronization when using a shared resource. This allows an unauthorized attacker to execute arbitrary code over a network and affe...

8.1CVSS5.7AI score0.00543EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70437

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...

7.8CVSS5.4AI score0.00278EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.7 views

PT-2026-70689

Name of the Vulnerable Software and Affected Versions Windows iSCSI Target Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows iSCSI Target Service. This issue allows an unauthorized attacker to cause a denial of service over a network. A...

5.9CVSS5.6AI score0.00528EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.6 views

PT-2026-70572

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description Incorrect authorization allows an authorized attacker to elevate privileges over a network, which enables them to affect the system. Recommendations At the moment, there is no...

8.8CVSS5.2AI score0.00538EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.7 views

PT-2026-70026

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to sufficiently validate certain token content under specific configurations. An unauthenticated attacker can send a specially crafted token to force the transmissio...

7CVSS5.2AI score0.00243EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.6 views

PT-2026-70686

Name of the Vulnerable Software and Affected Versions Windows iSCSI Target Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows iSCSI Target Service. This issue allows an unauthorized remote attacker to execute arbitrary code over a network,...

9.8CVSS6.3AI score0.006EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.8 views

PT-2026-70282

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description Improper access control within Ring 3 the least privileged level of the CPU where user applications run may allow an escalation of privilege. A local hardware adversary with an...

7.2CVSS5.1AI score0.0009EPSS
SaveExploits0References20
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.45 views

PT-2026-70769

Improper control of generation of code 'code injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

8.8CVSS5.5AI score0.00607EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.6 views

PT-2026-70470

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description A use-after-free condition in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

7.8CVSS5.8AI score0.00311EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.7 views

PT-2026-70574

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A stack-based buffer overflow occurs in Windows Win32K, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition where a program...

7.8CVSS5.7AI score0.0024EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70407

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description An integer overflow or wraparound occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there ...

7.8CVSS5.3AI score0.00311EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.6 views

PT-2026-70389

Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...

5.5CVSS5AI score0.00438EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/11 12:00 a.m.17 views

MAL-2026-13770 Malicious code in @telekom-ods/react-ui-kit (npm)

@telekom-ods/[email protected] ships an install hook that spawns a shell running a reconnaissance/exfiltration one-liner. The captured command reads /etc/passwd and /etc/hosts, runs id, and conditionally reads /etc/shadow if the process has read access, then sends the collected output as the...

5.7AI score
SaveExploits0References4
OSV
OSV
added 2026/08/11 12:00 a.m.32 views

CVE-2026-51583

An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...

8.5CVSS5.4AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.13 views

PT-2026-70551

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment...

7.8CVSS5.2AI score0.00371EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.6 views

PT-2026-70721

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an unauthorized attacker to execute arbitrary code locally or remotely,...

7.8CVSS7.8AI score0.00303EPSS
SaveExploits0References5
Rows per page
Query Builder