Lucene search
+L

6239 matches found

Positive Technologies
Positive Technologies
added 2025/01/24 12:00 a.m.18 views

PT-2025-8795

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A synchronization issue in the Linux kernel's md-bitmap component can cause a general protection fault, leading to a kernel crash. The problem occurs when the bitmap get stats function i...

7.8CVSS6.7AI score0.00218EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/24 12:00 a.m.18 views

PT-2025-5449 · Unknown · Elementinvader Addons For Elementor

Name of the Vulnerable Software and Affected Versions: ElementInvader Addons for Elementor versions 1.3.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For...

8.8CVSS6.9AI score0.00499EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/01/24 12:00 a.m.10 views

PT-2025-3718 · Toolstick · Toolstick

Name of the Vulnerable Software and Affected Versions: ToolStick affected versions not specified Description: The issue is caused by an uncontrolled search path in the ToolStick installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation and arbitrary code executi...

8.6CVSS8AI score0.00188EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/01/24 12:00 a.m.11 views

PT-2025-5487 · WordPress · Ai Chatbot For Wordpress – Hyve Lite

Name of the Vulnerable Software and Affected Versions: AI Chatbot for WordPress – Hyve Lite versions 1.2.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

5.9CVSS5.9AI score0.00354EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/23 12:00 a.m.14 views

PT-2025-2962 · Sharkssl · Sharkssl

Name of the Vulnerable Software and Affected Versions: SharkSSL version from 05/05/24 commit 64808a5e12c83b38f85c943dee0112e428dc2a43 Description: A heap buffer overflow in the server site handshake implementation allows a remote attacker to trigger a Denial-of-Service via a malformed Client-Hell...

7.5CVSS7.1AI score0.00486EPSS
SaveExploits0References8
CVE
CVE
added 2025/01/22 2:26 p.m.70 views

CVE-2025-24027

CVE-2025-24027 concerns the PrestaShop module ps_contactinfo . The vulnerability is a cross-site scripting (XSS) flaw affecting versions up to and including 3.3.2, arising when formatted addresses stored in the database are displayed. Exploitation is described as possible only in shops already vu...

6.2CVSS6.2AI score0.00411EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/22 12:00 a.m.7 views

PT-2025-6472 · Kaspersky · Kaspersky Security Cloud +11

Name of the Vulnerable Software and Affected Versions: Kaspersky Virus Removal Tool for Windows affected versions not specified Kaspersky Endpoint Security for Windows affected versions not specified Kaspersky Security for Virtualization Light Agent affected versions not specified Kaspersky...

4.6CVSS7AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/22 12:00 a.m.10 views

PT-2025-3713 · Traffic Alert Collision Avoidance System (Tcas) Ii · Collision Avoidance Systems

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves utilizing software-defined radios and a custom low-latency processing pipeline to transmit RF signals with spoofed location data to...

6CVSS6AI score0.00229EPSS
SaveExploits0References6
CVE
CVE
added 2025/01/21 9:23 p.m.88 views

CVE-2025-23196

CVE-2025-23196 describes a code injection vulnerability in the Ambari Alert Definition feature. An authenticated user can exploit the vulnerability when defining alert scripts, where the script filename field is executed via sh -c , enabling remote command execution on the server. Multiple connec...

8.8CVSS7.8AI score0.01258EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/21 12:00 a.m.8 views

PT-2025-2995

Name of the Vulnerable Software and Affected Versions NVIDIA Unified Memory driver for Linux affected versions not specified Description The issue concerns a vulnerability in the NVIDIA Unified Memory driver for Linux, where an attacker could potentially leak uninitialized memory. This could lead...

7.1CVSS6.1AI score0.00212EPSS
SaveExploits0References74
Positive Technologies
Positive Technologies
added 2025/01/21 12:00 a.m.31 views

PT-2025-3986 · Apache · Apache Httpd

Name of the Vulnerable Software and Affected Versions: Apache HTTPD affected versions not specified Description: The issue concerns a rejected reason related to the Apache HTTPD DNS. No further details are provided about the nature of the issue or its potential impact. There is no information...

7AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/18 12:00 a.m.10 views

PT-2025-1346 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows for the potential reading of protected files in various locations due to a lack of permission verification. This could lead to a local privilege escalation without...

7.8CVSS8.5AI score0.00103EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/01/18 12:00 a.m.14 views

PT-2025-5622

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned. Description: A issue exists in chess game setups and user interfaces that can lead to the misidentification of the King and Queen pieces. This issue arises primarily from ambiguous...

7.2CVSS6.2AI score0.01273EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/18 12:00 a.m.16 views

PT-2025-1340 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to incorrect boundary checking, which could allow access to kernel memory in user space. This might lead to a local privilege escalation without requiring...

7.8CVSS8.7AI score0.00095EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/01/18 12:00 a.m.11 views

PT-2025-1341 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A potential out-of-bounds write issue exists in BnDmAgent::onTransact in dm agent.cpp due to a neuter. This could lead to a local privilege escalation with System execution...

6.7CVSS9AI score0.00103EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/01/17 12:00 a.m.13 views

PT-2025-1335 · Google · Android

Name of the Vulnerable Software and Affected Versions: WifiServiceImpl.java affected versions not specified Description: The issue is related to a missing permission check in multiple functions of WifiServiceImpl.java, which could allow activating a Wi-Fi access point from a non-owner profile. Th...

7.8CVSS9.1AI score0.00077EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/01/17 12:00 a.m.16 views

PT-2025-1336 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or version is mentioned. Description: A possible out-of-bounds read in the asn1 ber decoder function in asn1 decoder.c could lead to local information disclosure with System execution privileges required. No user...

4.4CVSS7.6AI score0.00105EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/01/17 12:00 a.m.13 views

PT-2025-1343 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to multiple functions in Parcel.cpp, where it is possible to bypass address space layout randomization. This could lead to a local...

7.8CVSS7.5AI score0.00096EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/01/17 12:00 a.m.14 views

PT-2025-1334 · Unknown · Minithumbfile.Java

Name of the Vulnerable Software and Affected Versions: MiniThumbFile.java affected versions not specified Description: The issue in MiniThumbFile.java allows for the potential disclosure of local information without requiring additional execution privileges. This could lead to the exposure of...

5.5CVSS8.9AI score0.00099EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/01/17 12:00 a.m.17 views

PT-2025-1332 · Unknown · Userdictionaryprovider

Name of the Vulnerable Software and Affected Versions: UserDictionaryProvider affected versions not specified Description: The issue is related to multiple functions in UserDictionaryProvider.java, where a confused subordinate could potentially allow adding and removing words from the user...

7.8CVSS8.9AI score0.00201EPSS
SaveExploits0References5
Rows per page
Query Builder