Lucene search
+L

3142 matches found

Positive Technologies
Positive Technologies
•added 2017/03/17 12:00 a.m.•2 views

PT-2017-1621

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue is related to insufficient input validation in the Hyper-V virtualization system of the Windows operating system. An attacker could exploit this to cause a denial of service...

5.4CVSS0.01423EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2017/03/15 12:00 a.m.•2 views

PT-2017-16142

Name of the Vulnerable Software and Affected Versions Cisco Workload Automation Client Manager Server versions 6.3.0.116 and later Cisco Tidal Enterprise Scheduler Client Manager Server versions 6.2.1.435 and later Description The issue is caused by insufficient input validation, allowing an...

8.6CVSS0.01962EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2017/03/14 12:00 a.m.•3 views

PT-2017-1465

Name of the Vulnerable Software and Affected Versions Microsoft Edge versions affected versions not specified Microsoft Internet Explorer versions affected versions not specified Description The issue exists due to insufficient input validation in Microsoft browsers, allowing a remote attacker to...

4.3CVSS0.07586EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2017/03/14 12:00 a.m.•1 views

PT-2017-1622

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue is related to insufficient input validation in the Hyper-V virtualization system of the Windows operating system. It can be exploited by an attacker using a specially crafte...

5.4CVSS0.01512EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2017/03/14 12:00 a.m.•4 views

PT-2017-1655

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold, 1511, 1607 Microsoft Windows Server 2016 Description The issue allows remote attackers to modify PowerShell script without invalidating associated signatures. It exists due to insufficient input validation,...

5.5CVSS0.11264EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2017/03/14 12:00 a.m.•14 views

PT-2017-1939

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue exists due to insufficient input validation in the SMBv1 protocol of the Microsoft Windows operating system. It allows a remote attacker to execute arbitrary code using...

9.3CVSS8.3AI score0.9923EPSS
SaveExploits101References96
Positive Technologies
Positive Technologies
•added 2017/02/09 12:00 a.m.•2 views

PT-2017-4211

Name of the Vulnerable Software and Affected Versions PostGIS versions 2.x through 2.3.2 Description The issue is related to the ST AsX3D function in PostGIS, which is used with PostgreSQL. It allows remote attackers to cause a denial of service via crafted input, as demonstrated by an abnormal...

7.8CVSS0.03046EPSS
SaveExploits1References22
Positive Technologies
Positive Technologies
•added 2017/01/25 12:00 a.m.•2 views

PT-2017-3961

Name of the Vulnerable Software and Affected Versions GNU C Library glibc versions 2.31 and earlier Description The issue is related to the iconv program in the GNU C Library. When invoked with multiple suffixes in the destination encoding along with the -c option, it enters an infinite loop when...

5.9CVSS0.04006EPSS
SaveExploits0References240
Positive Technologies
Positive Technologies
•added 2017/01/19 12:00 a.m.•2 views

PT-2017-1141

Name of the Vulnerable Software and Affected Versions Java SE versions 6u131, 7u121, and 8u112 Java SE Embedded version 8u111 JRockit version R28.3.12 Description The issue exists due to insufficient input validation in the Java SE, Java SE Embedded, and JRockit components. It can be exploited by...

9.6CVSS0.04827EPSS
SaveExploits0References234
Positive Technologies
Positive Technologies
•added 2017/01/19 12:00 a.m.•2 views

PT-2017-1140

Name of the Vulnerable Software and Affected Versions Java SE versions 6u131, 7u121, and 8u112 Java SE Embedded version 8u111 JRockit version R28.3.12 Description The issue is related to insufficient input validation in the 2D component of the Java Platform. It allows an unauthenticated attacker...

9.6CVSS0.12013EPSS
SaveExploits2References234
Positive Technologies
Positive Technologies
•added 2017/01/17 12:00 a.m.•0 views

PT-2017-1139

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.7.16 and earlier Description The issue is related to insufficient input validation in the Server: Replication component of MySQL. It allows an attacker with network access via multiple protocols to compromise the MySQL...

6.8CVSS0.04792EPSS
SaveExploits0References288
Positive Technologies
Positive Technologies
•added 2017/01/03 12:00 a.m.•3 views

PT-2017-3539

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version 7.3 E0504P04 Description: The issue is related to insufficient input validation in the dbman service of the HPE Intelligent Management Center PLAT platform. This can be exploited by a remote...

7.8CVSS0.11762EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2016/12/20 12:00 a.m.•3 views

PT-2016-3151

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.23 Description The issue is caused by insufficient input validation in the mod auth digest module of the Apache HTTP Server. This can be exploited by a remote attacker to cause the server to crash...

7.5CVSS0.20952EPSS
SaveExploits0References97
Positive Technologies
Positive Technologies
•added 2016/12/01 12:00 a.m.•1 views

PT-2016-3026

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 55.0.2883.75 for Mac, Windows and Linux Google Chrome version prior to 55.0.2883.84 for Android Description The issue arises from the extensions API in Google Chrome incorrectly handling navigation within PDFs...

6.5CVSS0.0123EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2016/11/08 12:00 a.m.•12 views

PT-2016-2968 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is due to insufficient input validation in Microsoft Edge, allowing a remote attacker to potentially tamper with web page content using a specially crafted website...

7.6CVSS7.5AI score0.15277EPSS
SaveExploits0References21
Positive Technologies
Positive Technologies
•added 2016/09/29 12:00 a.m.•3 views

PT-2016-3153

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 53.0.2785.143 Opera affected versions not specified Description The issue is related to multiple unspecified vulnerabilities in Google Chrome, which exist due to insufficient input validation. These...

9.8CVSS0.01853EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2016/09/21 12:00 a.m.•2 views

PT-2016-6884

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.61T1 and later Cisco IOS XE affected versions not specified Description The issue allows remote authenticated users to read arbitrary files due to insufficient input validation by the affected framework. An attacker could...

6.8CVSS0.014EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2016/09/16 12:00 a.m.•65 views

Cisco IOS Software Data in Motion Denial of Service Vulnerability (cisco-sa-20160914-ios-xe)

A vulnerability in the Data in Motion DMo application in Cisco IOS software with the IOx feature set could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the DMo process. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted...

5.9CVSS6AI score0.01604EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2016/08/03 12:00 a.m.•20 views

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Bluetooth component in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges by connecting devices via Bluetooth while the main user is working...

5.4CVSS7.2AI score0.00246EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
•added 2016/07/22 12:00 a.m.•7 views

TYPO3 Form Component Arbitrary File Disclosure Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. An arbitrary file disclosure vulnerability exists in the TYPO3 Form component. An attacker could exploit this vulnerability to obtain sensitive information because the program...

6.5AI score
SaveExploits0References1
Rows per page
Query Builder