Lucene search
+L

72682 matches found

EUVD
EUVD
added 2026/08/18 12:30 a.m.19 views

EUVD-2026-60548

Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section...

5.3AI score0.00307EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/18 12:30 a.m.21 views

EUVD-2026-60542

Mattermost versions 10.11.x = 10.11.20, 11.7.x = 11.7.5 Mattermost fails to remove thread membership records when a user is removed from or leaves a team, which allows a previously removed user who is later re-invited to the team to view private channel thread root post content and metadata via t...

3.5CVSS5.3AI score0.00159EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/18 12:30 a.m.15 views

EUVD-2026-60546

Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated...

5.3AI score0.00349EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.28 views

PT-2026-77138

A flaw was found in BlueZ. Insufficient validation of packet length fields in GetFolderItems responses within the Audio/Video Remote Control Profile AVRCP implementation allows a malicious Bluetooth device within range to cause an out-of-bounds memory read. This vulnerability, affecting the parse...

6.3CVSS5.4AI score0.00201EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.24 views

PT-2026-77129

Unauthenticated Sensitive Data Exposure in 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery = 1.16.20 versions...

5.3CVSS5.2AI score0.0024EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.26 views

PT-2026-77146

Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the team, teamMembers.user, RESTHistory, GQLHistory, currentRESTSession, currentGQLSession, environments, globalEnvironments, and settings GraphQL paths expose another workspace member's private User data, while...

7.6CVSS5.2AI score0.00358EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.24 views

PT-2026-77156

Name of the Vulnerable Software and Affected Versions Red Hat Advanced Cluster Management for Kubernetes affected versions not specified Description A flaw in the must-gather component allows the cluster Proxy object to be dumped in raw form. This process bypasses the oc inspect redaction mechani...

5.5CVSS5.8AI score0.00143EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.26 views

PT-2026-77189

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product operations allow a low-privileged Vendor to access products owned by another Vendor. The admin/controller/product/products.php controller accepts a...

8.8CVSS5.3AI score0.00482EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.18 views

PT-2026-77187

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post operations allow a low-privileged Author to access posts owned by another Author. The admin/controller/content/posts.php controller permits filteradmin id t...

8.3CVSS5.4AI score0.00416EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.17 views

PT-2026-78182

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

6.5CVSS5.1AI score0.00261EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.16 views

PT-2026-77538

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation...

5.3CVSS5.1AI score0.00247EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.19 views

PT-2026-77547

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculati...

7.2CVSS5.2AI score0.00229EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.21 views

PT-2026-77587

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue exists in the Installation and Configuration component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successf...

7.5CVSS5.9AI score0.00414EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.17 views

PT-2026-77486

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal versions 12.2.1.4.0 Oracle WebCenter Portal versions 14.1.2.0.0 Description An issue in the Runtime Tools component allows a low-privileged attacker with network access via HTTP to compromise the system. Successful...

7.6CVSS5.9AI score0.00307EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.19 views

PT-2026-78198

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

5.9CVSS5.2AI score0.00261EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.18 views

PT-2026-78241

Name of the Vulnerable Software and Affected Versions 4gaBoards versions prior to 3.3.9 Description An issue exists where any authenticated user can enumerate account information for all users and retrieve arbitrary account details. This occurs because the users/index and users/show actions rely...

6.5CVSS5.5AI score0.00407EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.17 views

PT-2026-77943

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

8.2CVSS5.2AI score0.00424EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.18 views

PT-2026-78022

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description An issue exists in the Endeca Application Controller component that allows an unauthenticated attacker with network access via HTTP to compromise the...

6.1CVSS5.4AI score0.00179EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.15 views

PT-2026-77951

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low-privileged attacker with network access via HTTP to compromise the system. Exploitation requires human interaction fr...

7.6CVSS5.2AI score0.00254EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.15 views

PT-2026-77676

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculati...

5.9CVSS5.2AI score0.00239EPSS
SaveExploits0References2
Rows per page
Query Builder