Lucene search
+L

2064 matches found

Positive Technologies
Positive Technologies
added 2023/07/11 12:00 a.m.3 views

PT-2023-3540 · Microsoft · Activex +1

Name of the Vulnerable Software and Affected Versions: Microsoft ActiveX affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft ActiveX component, which can be exploited to execute arbitrary code on the target system by using a speciall...

7.8CVSS9.6AI score0.00527EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/07/11 12:00 a.m.4 views

PT-2023-3905 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Excel. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations: At the moment,...

7.8CVSS9.5AI score0.00631EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/07/11 12:00 a.m.4 views

PT-2023-3684 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Message Queuing MSMQ for Microsoft Windows operating systems. This can be exploited by a remote...

7.8CVSS9AI score0.01519EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2023/07/11 12:00 a.m.13 views

The vulnerability of the Microsoft ODBC Driver for SQL Server’s dynamic layout library, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft ODBC Driver for SQL Server’s dynamic layout library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00603EPSS
SaveExploits0References2Affected Software1
Redos
Redos
added 2023/07/06 12:00 a.m.26 views

ROS-2-1581

2.1581 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...

9.8CVSS8.1AI score0.05984EPSS
SaveExploits1
Cisco
Cisco
added 2023/07/05 4:00 p.m.23 views

Cisco BroadWorks Privilege Escalation Vulnerability

A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected device. The vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing a crafted...

6CVSS6.2AI score0.00204EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/06/27 12:00 a.m.11 views

PT-2023-5201 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM version 7.5.0 Description: The issue exists due to insufficient input validation, allowing a remote attacker to perform administrative actions. An authenticated user may be able to perform unauthorized actions. Recommendations...

4.3CVSS4.3AI score0.00444EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/06/22 12:00 a.m.14 views

The vulnerability of the Microsoft .NET Framework software, related to insufficient validation of input data, allows a perpetrator to cause service failures.

The vulnerability of the Microsoft .NET Framework software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using specially created data...

7.8CVSS7.2AI score0.0222EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/06/21 12:00 a.m.11 views

The vulnerability of the Windows Hyper-V hardware virtualization system allows a attacker to trigger a service failure.

The vulnerability of the Windows Hyper-V hardware virtualization system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using specially created data...

6.8CVSS6.8AI score0.01637EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/06/20 12:00 a.m.2 views

PT-2023-6762 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Edge, allowing an attacker to execute arbitrary code. Recommendations: At the moment, there is no information about...

7.3CVSS9.5AI score0.0266EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2023/06/20 12:00 a.m.18 views

PT-2023-4546 · Node.Js +10 · Node.Js +10

Name of the Vulnerable Software and Affected Versions: Node.js versions v16, v18, and v20 Description: The issue is related to insufficient input validation in the crypto.X509Certificate function. When an invalid public key is used to create an x509 certificate, a non-expected termination occurs,...

9.8CVSS7.2AI score0.87211EPSS
SaveExploits5References155
Positive Technologies
Positive Technologies
added 2023/06/15 12:00 a.m.4 views

PT-2023-3447 · Microsoft · Odbc Driver For Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver for SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft ODBC Driver for SQL Server library, which can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.00722EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/06/13 12:00 a.m.6 views

PT-2023-3356 · Microsoft · Windows Remote Desktop Client +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Client affected versions not specified Description: The vulnerability is related to insufficient input validation in the Windows Remote Desktop Client. It allows remote attackers to execute arbitrary code on the system...

10CVSS9.2AI score0.01346EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/06/13 12:00 a.m.16 views

PT-2023-3198 · Microsoft +1 · Visual Studio +3

Name of the Vulnerable Software and Affected Versions: .NET, .NET Framework, and Visual Studio affected versions not specified Description: The issue is related to insufficient input validation in the .NET, .NET Framework, and Visual Studio software platforms. This can be exploited by an attacker...

9.8CVSS7.2AI score0.99999EPSS
SaveExploits21References159
Positive Technologies
Positive Technologies
added 2023/06/13 12:00 a.m.7 views

PT-2023-3197 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft .NET Framework, which can be exploited by a remote attacker to cause a denial of service using...

7.8CVSS7.1AI score0.0222EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/06/13 12:00 a.m.2 views

PT-2023-3127 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Exchange Server, allowing a remote attacker to execute arbitrary code. This can affect the system...

8CVSS9.6AI score0.25002EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2023/06/13 12:00 a.m.4 views

PT-2023-3124 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows Hello biometric authentication function of Windows operating systems. This can be exploited to execute arbitrary code...

7.8CVSS9.7AI score0.00719EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/06/13 12:00 a.m.3 views

PT-2023-3099

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description The vulnerability in Microsoft Exchange Server is related to insufficient input validation, allowing a remote attacker to execute arbitrary code using specially crafted inpu...

9CVSS7.8AI score0.8145EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
added 2023/06/13 12:00 a.m.2 views

PT-2023-3399 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Excel. It allows remote attackers to execute arbitrary code, potentially affecting the system. Recommendations: At...

7.8CVSS9.6AI score0.02748EPSS
SaveExploits2References9
Positive Technologies
Positive Technologies
added 2023/06/13 12:00 a.m.7 views

PT-2023-3190 · Microsoft · Windows Geolocation Service +1

Name of the Vulnerable Software and Affected Versions: Windows Geolocation Service affected versions not specified Description: The issue is related to insufficient input validation in the Windows Geolocation Service, which can be exploited by an attacker to execute arbitrary code using a special...

7.8CVSS9.6AI score0.00719EPSS
SaveExploits0References9
Rows per page
Query Builder