Lucene search
+L

62180 matches found

Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.17 views

PT-2026-32918

The Nexi XPay plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization checks on the redirect function in all versions up to, and including, 8.3.0. This makes it possible for unauthenticated attackers to mark pending WooCommerce orders as paid/completed...

5.3CVSS5.8AI score0.00189EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.7 views

PT-2026-32874

🪟 CVE-2026-33100 in AFD.sys is the kind of bug that quietly hands a local attacker admin power. No splashy “new feature” — just patch and move on. https://t.co/QqYCpRIup5 WindowsSecurity PrivilegeEscalation AfdSys Cve202633100 https://t.co/Lrf56niqJN...

7CVSS6.2AI score0.00178EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/04/14 12:00 a.m.17 views

Microsoft Windows Virtualization-Based Security Enclave 访问控制错误漏洞

The Microsoft Windows Virtualization-Based Security Enclave is a software-based trusted execution environment within the host application address space provided by Microsoft. There is an access control vulnerability associated with the Microsoft Windows Virtualization-Based Security Enclave...

4.4CVSS5.9AI score0.00288EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.10 views

PT-2026-32754

CVE-2026-26177 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. https://t.co/AzyibGnFso...

7CVSS6.2AI score0.00203EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.29 views

PT-2026-32993

Name of the Vulnerable Software and Affected Versions 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery versions prior to 1.16.18 Description This plugin for WordPress allows unauthenticated attackers to retrieve flipbook page metadata for draft, private, and...

5.3CVSS5.8AI score0.00892EPSS
SaveExploits0References5
Redos
Redos
added 2026/04/14 12:00 a.m.13 views

ROS-20260414-73-0042

A vulnerability in the cifssmb3domount function of the fs/smb/client/cifsfs.c module of the SMB client support module of the Linux operating system kernel is related to improper memory release "memory leak". Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS5.8AI score0.00155EPSS
SaveExploits0
Redos
Redos
added 2026/04/14 12:00 a.m.8 views

ROS-20260414-73-0044

A vulnerability in the smclgrterminate function of the net/smc/smccore.c module of the Linux kernel's implementation of the SMC family of socket protocols is related to the occurrence of mutual blocking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS5.8AI score0.00118EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/04/14 12:00 a.m.15 views

Microsoft Windows Ancillary Function Driver for WinSock 资源管理错误漏洞

The Microsoft Windows Ancillary Function Driver for WinSock is a compatibility driver developed by Microsoft for Winsock. There is a resource management vulnerability present in the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit this vulnerability to gain elevated...

7CVSS5.8AI score0.00178EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/14 12:00 a.m.18 views

Microsoft Function Discovery Service 安全漏洞

The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Function Discovery Service fdwsd.dll. Attackers can exploit these vulnerabilities to gain elevated privileges. The following product...

7CVSS5.8AI score0.00252EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.9 views

PT-2026-32799

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A use after free race condition in the Windows Ancillary Function Driver for WinSock afd.sys allows an authorized attacker to elevate privileges locally...

7CVSS6.7AI score0.00351EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.10 views

PT-2026-32737

CVE-2026-26159 Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally. https://t.co/5uioiAiy6m...

7.8CVSS6.2AI score0.00256EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.12 views

PT-2026-32818

Name of the Vulnerable Software and Affected Versions Function Discovery Service fdwsd.dll affected versions not specified Description A race condition occurs in the Function Discovery Service fdwsd.dll due to concurrent execution using a shared resource with improper synchronization. This allows...

7CVSS6.4AI score0.01116EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.7 views

PT-2026-32750

CVE-2026-26173 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized atta… https://t.co/7eClolPk8J...

7CVSS6.4AI score0.00162EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/04/14 12:00 a.m.13 views

Microsoft Function Discovery Service 竞争条件问题漏洞

The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are vulnerabilities related to competition conditions in the Microsoft Function Discovery Service fdwsd.dll. Attackers can exploit these vulnerabilities to gain elevated privileges. The...

7CVSS5.8AI score0.00158EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/14 12:00 a.m.19 views

Microsoft Function Discovery Service 安全漏洞

The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Function Discovery Service. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versio...

7CVSS5.8AI score0.01116EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.7 views

PT-2026-32873

CVE-2026-33099 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. https://t.co/FciJfCRRR2...

7CVSS6.2AI score0.00178EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.18 views

PT-2026-32555

SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or...

2CVSS6AI score0.00168EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/04/14 12:00 a.m.15 views

Microsoft Windows Ancillary Function Driver for WinSock 代码问题漏洞

The Microsoft Windows Ancillary Function Driver for WinSock is a supplementary function driver for Winsock by Microsoft Corporation. There are code-related vulnerabilities in the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit these vulnerabilities to gain elevated...

7CVSS5.8AI score0.00162EPSS
SaveExploits0References1
Redos
Redos
added 2026/04/14 12:00 a.m.10 views

ROS-20260414-73-0060

A vulnerability in the ovlpermission function of the fs/overlayfs/inode.c module of the Overlayfs file system of the Linux kernel is related to NULL pointer dereferencing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected...

5.5CVSS5.8AI score0.00143EPSS
SaveExploits0
Redos
Redos
added 2026/04/14 12:00 a.m.10 views

ROS-20260414-73-0038

A vulnerability in the dbMount function in the fs/jfs/jfsdmap.c module of the JFS file system of the Linux operating system kernel is related to reading beyond buffer boundaries. Exploitation of the vulnerability could allow an attacker to gain access to protected information or cause a denial of...

7.8CVSS6AI score0.00164EPSS
SaveExploits0
Rows per page
Query Builder