Lucene search
K

16885 matches found

Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-27391

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Firefox ESR versions prior to 115.34 Firefox ESR versions prior to 140.9 Thunderbird versions prior to 149 Thunderbird versions prior to 140.9 Description A sandbox escape issue exists in the Responsive Design Mod...

10CVSS6.4AI score0.00505EPSS
Exploits0References260
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-26510

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.153 Description A flaw exists in the WebGL component of Google Chrome on Android that could allow a remote attacker to potentially escape the sandbox through a specially crafted HTML page. The issue...

8.8CVSS6.1AI score0.00415EPSS
Exploits1References39
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.5 views

PT-2026-27389

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Firefox ESR versions prior to 115.34 Firefox ESR versions prior to 140.9 Thunderbird versions prior to 149 Thunderbird versions prior to 140.9 Description A sandbox escape is possible due to incorrect boundary...

10CVSS5.8AI score0.006EPSS
Exploits0References260
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-21693

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Firefox ESR versions prior to 115.33 Firefox ESR versions prior to 140.8 Thunderbird versions prior to 148 Thunderbird versions prior to 140.8 Description A sandbox escape is possible due to incorrect boundary...

10CVSS5.2AI score0.00622EPSS
Exploits0References213
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-21694

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Firefox ESR versions prior to 115.33 Firefox ESR versions prior to 140.8 Thunderbird versions prior to 148 Thunderbird versions prior to 140.8 Description A sandbox escape issue exists in the Graphics: WebRender...

10CVSS5.3AI score0.00622EPSS
Exploits0References220
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.5 views

PT-2026-24117

Name of the Vulnerable Software and Affected Versions node-tar versions prior to 7.5.11 Description The node-tar software contains a flaw where it can be manipulated into creating a symbolic link that points outside the intended extraction directory. This is achieved by utilizing a drive-relative...

9.8CVSS5.8AI score0.01286EPSS
Exploits6References208
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.4 views

PT-2026-27387

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Firefox ESR versions prior to 140.9 Thunderbird versions prior to 149 Thunderbird versions prior to 140.9 Description A flaw exists in Firefox and Thunderbird due to a use-after-free condition within the Disabilit...

10CVSS6.4AI score0.00406EPSS
Exploits0References260
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.1 views

PT-2026-26522

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.153 Description A flaw exists in Google Chrome's Navigation feature due to inadequate validation of untrusted input. This could allow a remote attacker who has already compromised the renderer process...

8.8CVSS6.1AI score0.00415EPSS
Exploits1References40
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.5 views

PT-2026-26527

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.153 Description A use-after-free issue exists in the Digital Credentials API of Google Chrome. A remote attacker compromising the renderer process could potentially achieve a sandbox escape through a...

8.8CVSS6.1AI score0.00415EPSS
Exploits1References39
CNNVD
CNNVD
added 2026/01/01 12:0 a.m.5 views

eopkg 安全漏洞

eopkg is an open source package manager from GetSolus. A security vulnerability exists in eopkg versions prior to 4.4.0, which stems from the possibility that a malware package could escape the directory set by --destdir, causing files to be installed to other locations on the host...

5.8CVSS6.5AI score0.00257EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-27388

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Firefox ESR versions prior to 115.34 Firefox ESR versions prior to 140.9 Thunderbird versions prior to 149 Thunderbird versions prior to 140.9 Description A sandbox escape is possible due to incorrect boundary...

10CVSS6.4AI score0.00676EPSS
Exploits0References260
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.4 views

PT-2026-27386

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Firefox ESR versions prior to 115.34 Firefox ESR versions prior to 140.9 Thunderbird versions prior to 149 Thunderbird versions prior to 140.9 Description A sandbox escape exists because of incorrect boundary...

10CVSS5.8AI score0.00491EPSS
Exploits0References260
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-21709

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Firefox ESR versions prior to 115.33 Firefox ESR versions prior to 140.8 Thunderbird versions prior to 148 Thunderbird versions prior to 140.8 Description A flaw exists due to incorrect boundary conditions within...

10CVSS5.1AI score0.00757EPSS
Exploits2References258
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-21701

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Firefox ESR versions prior to 140.8 Thunderbird versions prior to 148 Thunderbird versions prior to 140.8 Description A sandbox escape issue exists in the Storage: IndexedDB component. This allows a potential esca...

10CVSS5.1AI score0.00757EPSS
Exploits2References263
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-21711

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Firefox ESR versions prior to 115.33 Firefox ESR versions prior to 140.8 Thunderbird versions prior to 148 Thunderbird versions prior to 140.8 Description A flaw exists that allows for a sandbox escape due to...

10CVSS5.2AI score0.00757EPSS
Exploits2References263
Microsoft CVE
Microsoft CVE
added 2025/12/31 9:2 a.m.4 views

Tracing logging user input may result in poisoning logs with ANSI escape sequences

...

2.3CVSS5.4AI score0.00303EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/12/31 2:13 a.m.10 views

CVE-2025-69234

Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment...

9.1CVSS6.9AI score0.0025EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/31 12:31 a.m.13 views

EUVD-2024-55370

Anevia Flamingo XL 3.2.9 contains a restricted shell vulnerability that allows remote attackers to escape the sandboxed environment through the traceroute command. Attackers can exploit the traceroute command to inject shell commands and gain full root access to the device by bypassing the...

9.8CVSS7AI score0.00718EPSS
Exploits2References5
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.5 views

EulerOS Virtualization 2.13.1 : aide (EulerOS-SA-2025-2618)

According to the versions of the aide package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability...

6.2CVSS7.4AI score0.00216EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.3 views

EulerOS Virtualization 2.13.0 : python3 (EulerOS-SA-2025-2614)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the...

7.5CVSS6.3AI score0.00611EPSS
Exploits0References5
Rows per page
Query Builder