Lucene search
+L

6231 matches found

Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.17 views

PT-2025-46228

Name of the Vulnerable Software and Affected Versions SAP Solution Manager affected versions not specified Description SAP Solution Manager is susceptible to a code injection issue stemming from inadequate input sanitization. An authenticated attacker can inject malicious code by calling a...

9.9CVSS6.7AI score0.00597EPSS
SaveExploits0References21
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.9 views

PT-2025-46510

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A race condition exists in the Windows Ancillary Function Driver for WinSock due to improper synchronization when handling concurrent execution with shared resources. This allows a locally...

7CVSS5.5AI score0.0025EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.12 views

PT-2025-46437

Name of the Vulnerable Software and Affected Versions UEFI firmware with Slim Bootloader affected versions not specified Description A flaw exists in the UEFI firmware for the Slim Bootloader that could allow for privilege escalation. A local attacker with privileged user access and high complexi...

7.1CVSS5.7AI score0.00115EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.7 views

PT-2025-46474

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description An issue exists in the Windows Routing and Remote Access Service RRAS where an untrusted pointer dereference can occur. This allows an authorized attack...

7.8CVSS5.4AI score0.00401EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.3 views

PT-2025-46476

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A heap-based buffer overflow exists in Windows Routing and Remote Access Service RRAS. This allows an authorized attacker to execute code over a network...

8CVSS6.1AI score0.00791EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.4 views

PT-2025-46458

Name of the Vulnerable Software and Affected Versions Windows Speech affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization in Windows Speech. This allows an authorized attacker to elevate privileges...

7CVSS5.5AI score0.00246EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.11 views

PT-2025-46238

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server Java affected versions not specified Description An information disclosure issue exists in SAP NetWeaver Application Server Java. An unauthenticated attacker can access internal metadata files through crafted...

5.3CVSS6.2AI score0.00465EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.13 views

PT-2025-46376

Name of the Vulnerable Software and Affected Versions NVIDIA AIStore affected versions not specified Description NVIDIA AIStore contains a security flaw in the Authentication AuthN component. A successful exploit of this issue may lead to escalation of privileges, information disclosure, and data...

8.8CVSS6.5AI score0.00368EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.6 views

PT-2025-46496

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow exists in Microsoft Office Excel. This issue could allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is ...

7.8CVSS6AI score0.00485EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.7 views

PT-2025-46455

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A double free condition exists in Windows Smart Card. This allows an authorized attacker to gain elevated privileges on a local system. Recommendations At the moment, there is no information...

7.8CVSS5.5AI score0.00401EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.11 views

PT-2025-46461

Name of the Vulnerable Software and Affected Versions Windows WLAN Service affected versions not specified Description An issue exists in the Windows WLAN Service where external control of a file name or path can be exploited by an authorized attacker to gain elevated privileges locally...

7.8CVSS5.6AI score0.00375EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.19 views

PT-2025-46307

Name of the Vulnerable Software and Affected Versions Axis Communications ACAP applications affected versions not specified Description ACAP applications may be able to gain elevated privileges due to improper input validation, which could lead to privilege escalation. This is only possible if th...

6.7CVSS5.3AI score0.00136EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.11 views

PT-2025-46470

Name of the Vulnerable Software and Affected Versions Multimedia Class Scheduler Service MMCSS affected versions not specified Description A use after free condition exists in the Multimedia Class Scheduler Service MMCSS. This allows a locally authorized attacker to elevate privileges...

7.8CVSS5.4AI score0.00492EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.18 views

PT-2025-46413

Name of the Vulnerable Software and Affected Versions Intel UEFI reference platforms affected versions not specified Description The kernel on some Intel UEFI reference platforms contains debug code that may allow a denial of service and escalation of privilege. A system software adversary with...

8.3CVSS6.2AI score0.00125EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.10 views

PT-2025-46480

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description An untrusted pointer dereference in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. A...

7CVSS6.9AI score0.01797EPSS
SaveExploits0References13
CBLMariner
CBLMariner
added 2025/11/10 9:36 p.m.7 views

CVE-2025-1180 affecting package crash for versions less than 8.0.1-5

CVE-2025-1180 affecting package crash for versions less than 8.0.1-5. An upgraded version of the package is available that resolves this issue...

3.1CVSS4.1AI score0.00685EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2025/11/07 12:00 a.m.14 views

PT-2025-45481

Name of the Vulnerable Software and Affected Versions Autodesk products affected versions not specified Description A specially designed PRT file, when processed by specific Autodesk software, can lead to a memory corruption issue. An attacker could potentially use this to run code without...

7.8CVSS5.5AI score0.00198EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/11/07 12:00 a.m.15 views

PT-2025-45508

Name of the Vulnerable Software and Affected Versions tQuadra CMS version 4.2.1117 Description A Local File Inclusion LFI issue exists in tQuadra CMS. The vulnerability is located in the "/styles/" path, which does not properly sanitize user-supplied input. An attacker can exploit this by sending...

7.5CVSS6.5AI score0.00455EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/11/07 12:00 a.m.13 views

PT-2025-45483

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A flaw exists due to improper handling of a malformed Connection Request. Specifically, when the interval is set to 1, which is an illegal value, and the chM is set to 0x7CFFFFFFFF, a crash is...

6.5CVSS6.3AI score0.00187EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.13 views

PT-2025-45388

Name of the Vulnerable Software and Affected Versions Ubia camera ecosystem affected versions not specified Description The Ubia camera ecosystem does not adequately secure API credentials, potentially allowing an attacker to connect to backend services. Successful exploitation could grant an...

7.1CVSS6.3AI score0.00256EPSS
SaveExploits0References6
Rows per page
Query Builder