Lucene search
K

72587 matches found

Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.12 views

PT-2026-39939

An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker...

6CVSS5.8AI score0.00396EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.10 views

PT-2026-40083

Improper input validation for some IntelR QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

6.9CVSS5.7AI score0.00099EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.10 views

PT-2026-40404

Name of the Vulnerable Software and Affected Versions CAI Content Credentials versions 0.78.2, 0.7.0 and earlier Description Improper Input Validation can lead to an application denial-of-service, allowing an attacker to crash the application. This issue does not require user interaction...

6.2CVSS5.2AI score0.00255EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.13 views

AXIS OS 安全漏洞

AXIS OS is an operating system for edge devices developed by Axis, a Swedish company. There is a security vulnerability in AXIS OS, which stems from improper validation of configuration file inputs in the local file system. This vulnerability may allow code execution and potentially escalate...

8.8CVSS6.2AI score0.00226EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.7 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a vulnerability related to input validation. This vulnerability stemmed from insufficient validation of untrusted inputs in the SiteIsolation component. It was possible for remote...

4.3CVSS5.8AI score0.00196EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.11 views

Scramble 代码注入漏洞

Scramble is a tool developed by de:doc for automatically generating API documentation for Laravel projects. Versions of Scramble from 0.13.2 to 0.13.22 contained a code injection vulnerability. This vulnerability stemmed from the exposed documentation endpoints and the use of validation rules tha...

9.4CVSS6AI score0.0586EPSS
Exploits3References2
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.8 views

Intel QAT software drivers for Windows 输入验证错误漏洞

Intel QAT software drivers for Windows are a set of encryption and compression hardware acceleration drivers for the Windows platform developed by Intel Corporation. Versions of Intel QAT software drivers for Windows prior to version 1.13 contain a vulnerability related to input validation. This...

6.9CVSS5.8AI score0.00099EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.10 views

Intel Endpoint Management Assistant 输入验证错误漏洞

Intel Endpoint Management Assistant is a management software developed by Intel Corporation in the United States. This software provides security and convenience for remote work. Versions of Intel Endpoint Management Assistant prior to 1.14.5 contained a vulnerability related to input validation...

8.7CVSS5.8AI score0.00188EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.7 views

Adobe CAI Content Credentials 输入验证错误漏洞

Adobe CAI Content Credentials is a content trust marking system provided by Adobe Inc., which offers capabilities for authenticating digital content sources and tracking its editing history. Adobe CAI Content Credentials has a vulnerability related to input validation errors. This vulnerability...

6.2CVSS5.8AI score0.00193EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.8 views

WordPress plugin Next Date 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...

6.4CVSS5.8AI score0.00187EPSS
Exploits0References1
Amd
Amd
added 2026/05/12 12:0 a.m.10 views

AMD RAID Driver Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2024-21962| Improper input validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location, potentially resulting in privilege escalation and arbitrary code...

8.6CVSS6.1AI score0.00106EPSS
Exploits0
Redos
Redos
added 2026/05/12 12:0 a.m.6 views

ROS-20260512-73-0032

A vulnerability in the Core component of the Oracle VM VirtualBox virtual machine is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to gain full control over the application...

8.2CVSS7.1AI score0.00264EPSS
Exploits0
Redos
Redos
added 2026/05/12 12:0 a.m.9 views

ROS-20260512-73-0029

A vulnerability in the Core component of the Oracle VM VirtualBox virtual machine is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to gain full control over the application...

8.2CVSS7.1AI score0.00264EPSS
Exploits0
Redos
Redos
added 2026/05/12 12:0 a.m.9 views

ROS-20260512-73-0016

A vulnerability in the Core component of Oracle VM VirtualBox virtual machine is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to gain full control over the application...

7.5CVSS7.1AI score0.00198EPSS
Exploits0
Redos
Redos
added 2026/05/12 12:0 a.m.10 views

ROS-20260512-73-0013

A vulnerability in the Core component of Oracle VM VirtualBox is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker acting remotely to gain full control over the application...

7.5CVSS7.1AI score0.00227EPSS
Exploits0
Redos
Redos
added 2026/05/12 12:0 a.m.9 views

ROS-20260512-73-0027

A vulnerability in the Core component of the Oracle VM VirtualBox virtual machine is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to gain full control over the application...

8.2CVSS7.1AI score0.00196EPSS
Exploits0
Redos
Redos
added 2026/05/12 12:0 a.m.8 views

ROS-20260512-73-0030

A vulnerability in the Core component of Oracle VM VirtualBox virtual machine is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to gain full control over the application...

8.2CVSS7.1AI score0.00264EPSS
Exploits0
Redos
Redos
added 2026/05/12 12:0 a.m.7 views

ROS-20260512-73-0031

A vulnerability in the Core component of the Oracle VM VirtualBox virtual machine is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to gain full control over the application...

8.2CVSS7.1AI score0.00264EPSS
Exploits0
Redos
Redos
added 2026/05/12 12:0 a.m.9 views

ROS-20260512-73-0017

A vulnerability in the Core component of Oracle VM VirtualBox virtual machine is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to gain full control over the application...

7.5CVSS7.1AI score0.00212EPSS
Exploits1
Redos
Redos
added 2026/05/12 12:0 a.m.10 views

ROS-20260512-73-0023

A vulnerability in the Core component of the Oracle VM VirtualBox virtual machine is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to gain full control over the application...

8.2CVSS7.1AI score0.00196EPSS
Exploits0
Rows per page
Query Builder