Lucene search
+L

6231 matches found

Positive Technologies
Positive Technologies
added 2025/09/03 12:00 a.m.7 views

PT-2025-44692

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in Google Chrome that could allow attackers to impact the system. The issue involves an incorrect security user interface in the Omnibox. Recommendations At the moment,...

8.8CVSS6.2AI score0.06679EPSS
SaveExploits2References91
Positive Technologies
Positive Technologies
added 2025/09/02 12:00 a.m.11 views

PT-2025-35561

Name of the Vulnerable Software and Affected Versions: rsbi-pom version 4.7 Description: rsbi-pom version 4.7 is vulnerable to SQL Injection via the /bi/service/model/DatasetService API endpoint. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

9.8CVSS7.2AI score0.00376EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/09/01 12:00 a.m.9 views

PT-2025-37109

Name of the Vulnerable Software and Affected Versions Foreman affected versions not specified Description An authorization issue exists in Foreman’s GraphQL API. Low-privileged users can access metadata that they should not be able to view. The GraphQL endpoint does not enforce access controls...

5CVSS5.9AI score0.00348EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2025/08/29 12:00 a.m.7 views

PT-2025-38556

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s wifi subsystem related to SSID length handling within the cfg80211 connect result function. Specifically, insufficient bounds checking on the...

7.8CVSS6.3AI score0.00217EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/08/27 12:00 a.m.12 views

PT-2025-34892 · Cisco · Cisco Ucs Manager

Name of the Vulnerable Software and Affected Versions: Cisco UCS Manager Software affected versions not specified Description: A vulnerability in the Cisco UCS Manager Software Command Line Interface CLI may allow an authenticated, local attacker with administrative privileges to read, create, or...

6CVSS6.1AI score0.00185EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/27 12:00 a.m.12 views

PT-2025-34841 · Sma Solar Technology · Sunny Boy

Name of the Vulnerable Software and Affected Versions: Sunny Boy affected versions not specified Description: An authorized remote attacker can access files and directories outside the intended web root, potentially exposing sensitive system information of the affected devices. Recommendations: A...

6.5CVSS6.4AI score0.00656EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/08/27 12:00 a.m.12 views

PT-2025-34846 · Clininet · Clininet

Name of the Vulnerable Software and Affected Versions: CliniNET affected versions not specified Description: Unauthenticated access to the /cgi-bin/CliniNET.prd/GetActiveSessions.pl endpoint allows takeover of any user session logged into the system, including those with administrative privileges...

9.4CVSS5.8AI score0.00247EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/08/27 12:00 a.m.8 views

PT-2025-34890 · Cisco · Cisco Nx-Os

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an...

4.4CVSS6.7AI score0.03166EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/08/26 12:00 a.m.7 views

PT-2025-34763

Name of the Vulnerable Software and Affected Versions: NetScaler ADC and NetScaler Gateway affected versions not specified Description: Improper access control exists on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway. An attacker gaining access to the appliance’s NSIP,...

8.7CVSS6.1AI score0.02824EPSS
SaveExploits0References20
Positive Technologies
Positive Technologies
added 2025/08/22 12:00 a.m.15 views

PT-2025-34369 · Quantumnous · Quantumnous New-Api

Name of the Vulnerable Software and Affected Versions: QuantumNous new-api version 0.8.5.2 Description: The QuantumNous new-api is susceptible to a Cross-Site Scripting XSS issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

8.8CVSS6AI score0.00421EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/08/22 12:00 a.m.19 views

PT-2025-34391

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the ALSA subsystem, specifically in the scarlett2 input select ctl info function. A missing NULL check when allocating string arrays via kasprin...

8.5CVSS6.2AI score0.07644EPSS
SaveExploits3References530
Positive Technologies
Positive Technologies
added 2025/08/22 12:00 a.m.11 views

PT-2025-34438 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: The D-Link DIR-619L device is susceptible to a buffer overflow issue in the formSysCmd function through the submit-url parameter. Recommendations: At the moment, there is no information about a new...

9.8CVSS7.5AI score0.00511EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/08/22 12:00 a.m.11 views

PT-2025-34439 · Tenda · Tenda Ax3

Name of the Vulnerable Software and Affected Versions: Tenda AX3 version V16.03.12.10 CN Description: The Tenda AX3 Router is susceptible to a buffer overflow condition in the fromSetSysTime function through manipulation of the ntpServer parameter. Recommendations: At the moment, there is no...

9.8CVSS7.5AI score0.00412EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/08/21 12:00 a.m.13 views

PT-2025-34276 · Infinitt Healthcare · Infinitt Pacs System Manager

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: An attacker could exploit this vulnerability by uploading arbitrary files via a specific endpoint, potentially leading to unauthorized remote code execution o...

6.3CVSS7.9AI score0.00328EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/08/19 12:00 a.m.17 views

PT-2025-33752 · Jasonclark · Getsemantic

Name of the Vulnerable Software and Affected Versions: jasonclark getsemantic versions up to 040c96eb8cf9947488bd01b8de99b607b0519f7d Description: A vulnerability exists in jasonclark getsemantic. The issue is related to cross site scripting, triggered by manipulating the view argument in the...

5.1CVSS6.5AI score0.00361EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/08/19 12:00 a.m.16 views

PT-2025-46745

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's pwm subsystem, specifically within the berlin driver. An incorrect register was being used during suspend and resume operations. The driver was...

4.6CVSS7.3AI score0.0021EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/08/19 12:00 a.m.10 views

PT-2025-33848 · Ibm · Ibm Sterling File Gateway +1

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator version 6.2.1.0 IBM Sterling File Gateway version 6.2.1.0 Description: IBM Sterling B2B Integrator and IBM Sterling File Gateway are susceptible to a cross-site scripting issue. An authenticated user can embed...

5.4CVSS5.7AI score0.00233EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/08/18 12:00 a.m.28 views

PT-2025-33690 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: The device contains a command injection issue via the bupload.html component. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

6.5CVSS7.6AI score0.00818EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/08/18 12:00 a.m.18 views

PT-2025-33694

Name of the Vulnerable Software and Affected Versions: Lenovo PC Manager affected versions not specified Description: An improper permission vulnerability exists in Lenovo PC Manager that could allow a local attacker to escalate privileges. Recommendations: At the moment, there is no information...

8.5CVSS5.9AI score0.00119EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/08/18 12:00 a.m.12 views

PT-2025-33683 · Cip · Cip

Name of the Vulnerable Software and Affected Versions: Versions affected not specified Description: A security issue exists due to improper handling of malformed CIP Forward Close packets during fuzzing. The controller enters a solid red Fault LED state and becomes unresponsive. Upon power cycle,...

9.3CVSS7.2AI score0.00366EPSS
SaveExploits0References5
Rows per page
Query Builder