Lucene search
+L

78 matches found

Positive Technologies
Positive Technologies
added 2026/06/29 12:0 a.m.21 views

PT-2026-53495

Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token | Field | Value | | ---------------- | ----- | | Repository | pipeboard-co/meta-ads-mcp | | Affected version | ≤ 1.0.101 commit 496c988 7d14226; Versions 1.0.102–1.0.105 lack git tags, so patch status is unconfirmed. | |...

9.1CVSS6AI score0.00344EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:0 a.m.13 views

Уязвимость элемента управления вкладками Tab Strip браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить подмену домена

Уязвимость элемента управления вкладками Tab Strip браузеров Google Chrome и Microsoft Edge связана с ошибками представления информации пользовательским интерфейсом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить подмену домена через созданную HTML-страницу...

7.8CVSS5.8AI score0.00171EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/06/05 12:0 a.m.10 views

The vulnerability of the Telnet protocol implementation in the cryptographic security tool PuTTY, which allows attackers to perform spoofing attacks

The vulnerability of the Telnet protocol implementation in the cryptographic protection tool PuTTY is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

3.1CVSS5.2AI score0.00224EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/05/28 12:0 a.m.6 views

Уязвимость компонента Speech браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю проводить спуфинг-атаки

Уязвимость компонента Speech браузеров Google Chrome и Microsoft Edge связана с ошибками представления информации пользовательским интерфейсом. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, проводить спуфинг-атаки...

6.4CVSS5.8AI score0.0019EPSS
SaveExploits0References6Affected Software4
OSV
OSV
added 2026/02/26 4:27 p.m.10 views

GO-2026-4326 Mattermost is vulnerable to DoS due to infinite re-renders on API errors in github.com/mattermost/mattermost-server

Mattermost is vulnerable to DoS due to infinite re-renders on API errors in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...

6.8CVSS5.6AI score0.00274EPSS
SaveExploits0References6
CVE
CVE
added 2026/02/19 2:58 p.m.44 views

CVE-2025-71241

SPIP

6.1CVSS5.6AI score0.00184EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2026/02/17 12:0 a.m.16 views

HPE Aruba Networking 5G Core server API 安全漏洞

The HPE Aruba Networking 5G Core Server API is a programming and management interface provided by the American company HPE. There are security vulnerabilities associated with the HPE Aruba Networking 5G Core Server API. These vulnerabilities stem from improper handling of API errors, which may...

6.5CVSS5.8AI score0.00326EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/01/16 12:30 p.m.16 views

Mattermost is vulnerable to DoS due to infinite re-renders on API errors

Mattermost versions 10.11.x = 10.11.8, 11.1.x = 11.1.1, 11.0.x = 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops...

6.8CVSS6.8AI score0.00274EPSS
SaveExploits0References7Affected Software1
EUVD
EUVD
added 2026/01/16 11:25 a.m.12 views

EUVD-2026-2916

Mattermost versions 10.11.x = 10.11.8, 11.1.x = 11.1.1, 11.0.x = 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops...

6.8CVSS6.2AI score0.00274EPSS
SaveExploits0References6
Redos
Redos
added 2025/12/17 12:0 a.m.12 views

ROS-20251217-7310

A vulnerability in Mozilla Firefox and Firefox ESR browsers is related to information presentation errors in the user interface. Exploitation of the vulnerability could allow an attacker acting remotely to conduct spoofing attacks...

3.4CVSS6.5AI score0.00262EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/12/10 12:0 a.m.11 views

PT-2026-3244

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.x through 10.11.8 Mattermost versions 11.1.x through 11.1.1 Mattermost versions 11.0.x through 11.0.6 Description The software contains a flaw that does not prevent infinite re-renders when API errors occur...

6.8CVSS5.2AI score0.00274EPSS
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2004-1693

Malware in sbrugna...

5CVSS6.4AI score0.08097EPSS
SaveExploits2References5
Microsoft CVE
Microsoft CVE
added 2025/09/28 1:2 a.m.8 views

hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur

...

5.5CVSS7AI score0.00199EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.10 views

The vulnerability of Microsoft Edge browser, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

7.8CVSS7.8AI score0.00805EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.11 views

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, are related to information representation errors in the user interface. These vulnerabilities allow attackers to influence the integrity of protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, are related to information representation errors in the user interface. Exploiting these vulnerabilities can allow an attacker to influence the integrity of protected information...

5CVSS6.8AI score0.0033EPSS
SaveExploits0References20Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/03/07 12:0 a.m.29 views

The vulnerability of the Mozilla Firefox browser, related to errors in information representation by the user interface, allows a hacker to replace the address bar.

The vulnerability of the Mozilla Firefox browser is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to substitute the address bar with a specially created link...

6.5CVSS5.9AI score0.00442EPSS
SaveExploits0References6Affected Software5
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2022-48883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to...

7.8CVSS5.6AI score0.0023EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/02/17 12:0 a.m.11 views

The vulnerability of the Microsoft Outlook for Android client, related to information representation errors in the user interface, allows a hacker to perform spear-phishing attacks.

The vulnerability of the Microsoft Outlook for Android client is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

5.3CVSS7.8AI score0.01122EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/10 12:0 a.m.8 views

The vulnerability of Documenso’s digital signature software lies in errors in the user interface’s information presentation, which allows attackers to perform spoofing attacks.

The vulnerability of Documenso’s digital signature software is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

6.3CVSS5.5AI score0.00208EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.19 views

The vulnerability of Microsoft Exchange Server servers, related to errors in information representation by the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Exchange Server servers is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to carry out spear-phishing attacks...

7.8CVSS7.7AI score0.07748EPSS
SaveExploits0References3
Rows per page
Query Builder