Lucene search
+L

6240 matches found

Positive Technologies
Positive Technologies
added 2025/03/07 12:00 a.m.17 views

PT-2025-26888 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.8AI score0.00247EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/03/07 12:00 a.m.14 views

PT-2025-26884 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability, as the...

7.8CVSS7.7AI score0.00247EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/03/07 12:00 a.m.10 views

PT-2025-10570 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not explicitly provided, but it appears to be related to a security concern, possibly an XSS issue, as indicated by the hashtag xss. No details about t...

5.4CVSS5.7AI score0.00414EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/03/06 12:00 a.m.6 views

PT-2025-20534

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the handling of isochronous Ring Underrun/Overrun events in the Linux kernel's xHCI Extensible Host Controller Interface implementation. Specifically, when such an eve...

7.8CVSS6.7AI score0.66418EPSS
SaveExploits0References367
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2024-48949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits sig.S.gtesig.eddsa.curve.n || sig.S.isNeg validation...

9.1CVSS7AI score0.00496EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2024-5834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromi...

8.8CVSS7.3AI score0.00573EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/03/06 12:00 a.m.16 views

PT-2025-10015

Name of the Vulnerable Software and Affected Versions Trimble SketchUp affected versions not specified Description The issue is related to an uninitialized variable in the SKP file parsing mechanism, which can lead to remote code execution. Recommendations At the moment, there is no information...

7.8CVSS8AI score0.00442EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/03/05 12:00 a.m.13 views

PT-2025-9854

Name of the Vulnerable Software and Affected Versions Spacy-LLM version 0.7.2 Description A Server-Side Template Injection SSTI vulnerability allows attackers to execute arbitrary code via injecting a crafted payload into the template field. Recommendations For Spacy-LLM version 0.7.2, as a...

9.8CVSS6.3AI score0.00796EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2023-6936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wolfSSL prior to 5.6.6, if callback functions are enabled via the WOLFSSLCALLBACKS flag, then a malicious TLS client or network attacker can trigger a buffer...

9.1CVSS6AI score0.006EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2023-29400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Templates containing actions in unquoted HTML attributes e.g. attr=. executed with empty input can result in output with unexpected results when parsed due to...

7.3CVSS6.7AI score0.01037EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2023-32359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2. A user's password may be read...

7.5CVSS7.4AI score0.00942EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2021-38698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic...

6.5CVSS6.5AI score0.01523EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2021-43666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtlspkcs12derivation function when an input password's length is 0...

7.5CVSS6.8AI score0.02125EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/03/04 12:00 a.m.21 views

PT-2025-14284

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the Linux kernel, specifically the mctp i3c component. It involves handling a NULL header address. The daddr can be NULL if there is no neighbour table entry present, ...

7.8CVSS7.2AI score0.66418EPSS
SaveExploits3References671
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2018-11212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libjpeg 9a and 9d. The allocsarray function in jmemmgr.c allows remote attackers to cause a denial of service divide-by-zero error vi...

6.5CVSS6.7AI score0.0501EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2018-16542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interpreter stack-size checking during error handli...

5.5CVSS6.5AI score0.01908EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2016-7032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sudonoexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the 1 system o...

7CVSS7AI score0.00337EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2020-13164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventi...

7.5CVSS7AI score0.02921EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2016-5323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a...

7.5CVSS7.2AI score0.05789EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2017-9469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus,...

7.5CVSS7.4AI score0.06084EPSS
SaveExploits0References2
Rows per page
Query Builder