Lucene search
K

23 matches found

Positive Technologies
Positive Technologies
added 2025/07/17 12:0 a.m.3 views

PT-2025-34433

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists due to an unstable dma buf field within the drm gem object structure in the Linux kernel. The field can become NULL when user space releases the final GEM handle on the...

5.5CVSS6.2AI score0.00027EPSS
Exploits0References18
Positive Technologies
Positive Technologies
added 2025/07/17 12:0 a.m.3 views

PT-2025-34434

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A revert was implemented to address an issue where the dma buf field in the drm gem object structure became unstable during the object instance's lifetime. Specifically, the field coul...

5.5CVSS6.1AI score0.00027EPSS
Exploits0References16
Positive Technologies
Positive Technologies
added 2025/04/16 12:0 a.m.2 views

PT-2025-38571

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the wifi subsystem, specifically in the cfg80211 component, leading to a use-after-free condition in the cmp bss function. This issue was addresse...

7.8CVSS6.7AI score0.00022EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/02/24 12:0 a.m.3 views

PT-2025-7758 · Unknown · Reactive Mortgage Calculator

Name of the Vulnerable Software and Affected Versions: Reactive Mortgage Calculator versions 1.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it is a Stored XSS...

6.5CVSS8.4AI score0.00088EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/01/27 12:0 a.m.2 views

PT-2025-5556 · Unknown · Notfound Bridge Core

Name of the Vulnerable Software and Affected Versions: NotFound Bridge Core versions n/a through 3.3 Description: The issue is related to a Missing Authorization vulnerability in NotFound Bridge Core. This vulnerability affects the authorization process, potentially allowing unauthorized access...

4.3CVSS6.8AI score0.00211EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.2 views

PT-2025-2837 · Allaccessible · Accessibility

Name of the Vulnerable Software and Affected Versions: Accessibility by AllAccessible versions 1.3.4 and earlier Description: The issue is related to an incorrect privilege assignment in AllAccessible Team Accessibility, allowing privilege escalation. This problem affects Accessibility by...

8.8CVSS9.3AI score0.00348EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/01/05 12:0 a.m.1 views

PT-2025-1823 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: There is a request for information about a specific issue. No details are provided about the nature of the issue, potentially affected devices, ...

7AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/12/18 12:0 a.m.2 views

PT-2024-36236 · Hmd · Hmd

Name of the Vulnerable Software and Affected Versions: hmd versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious scripts into we...

7.1CVSS6.8AI score0.00231EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.2 views

PT-2024-13500 · Themewinter · Wpcafe

Name of the Vulnerable Software and Affected Versions: WPCafe versions through 2.2.22 Description: The issue is related to a Missing Authorization vulnerability in Themewinter WPCafe, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

9.8CVSS9.4AI score0.00713EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/11/19 12:0 a.m.1 views

PT-2024-34780 · Unknown · Gmo Social Connection

Name of the Vulnerable Software and Affected Versions: GMO Social Connection versions 1.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Cross-Site Scripting XSS. This means an attacker could potentially trick a user into performi...

7.1CVSS6.4AI score0.00144EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/11/10 12:0 a.m.2 views

PT-2024-20484 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The input does not specify the name of the vulnerable software or the affected versions. Description: A patch has been released for a previously existing issue. Recommendations: At the moment, there is no information about a newer version tha...

7AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/21 12:0 a.m.3 views

PT-2024-32770 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A severe issue was disclosed for the Linux Kernel. The upstream kernel version 6.6.58 fixes bugs and vulnerabilities. For more information about the vulnerabilities, additional resourc...

9.2AI score
Exploits0References15
Positive Technologies
Positive Technologies
added 2024/06/09 12:0 a.m.3 views

PT-2024-23467 · Delucks Gmbh · Delucks Seo

Name of the Vulnerable Software and Affected Versions: DELUCKS SEO versions 2.5.4 and earlier Description: The issue is related to a Missing Authorization vulnerability in DELUCKS GmbH DELUCKS SEO. Recommendations: For DELUCKS SEO versions 2.5.4 and earlier, update to a version that contains a fi...

9.8CVSS9.3AI score0.00472EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/05/08 12:0 a.m.3 views

PT-2024-25983 · Themeqx · Themeqx Letterpress

Name of the Vulnerable Software and Affected Versions: Themeqx LetterPress versions 1.2.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inje...

5.9CVSS6.7AI score0.00171EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2024/04/15 12:0 a.m.4 views

PT-2024-24581 · Unknown · Wptravelly

Name of the Vulnerable Software and Affected Versions: WpTravelly versions 1.6.0 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge or consent. Recommendations: For versio...

4.3CVSS6.7AI score0.00162EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/04/15 12:0 a.m.4 views

PT-2024-24437 · Libsyn · Libsyn Publisher Hub

Name of the Vulnerable Software and Affected Versions: Libsyn Publisher Hub versions 1.4.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...

4.3CVSS6.5AI score0.002EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/04/07 12:0 a.m.3 views

PT-2024-23874 · Unknown · Sizam Rehub

Name of the Vulnerable Software and Affected Versions: Sizam Rehub versions through 19.6.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting malicious S...

8.5CVSS9.8AI score0.00166EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/03/27 12:0 a.m.2 views

PT-2024-23289 · Unknown · Contact Form To Any Api

Name of the Vulnerable Software and Affected Versions: Contact Form to Any API versions 1.1.8 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by...

8.5CVSS8AI score0.00281EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/01/31 12:0 a.m.4 views

PT-2024-37896 · Grafana · Grafana

Name of the Vulnerable Software and Affected Versions: Grafana affected versions not specified Description: A medium severity security fix has been released for Grafana. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

9.8CVSS6.9AI score0.32338EPSS
Exploits3References84
Positive Technologies
Positive Technologies
added 2023/12/19 12:0 a.m.3 views

PT-2023-31082 · Oceanwp · Ocean Extra

Name of the Vulnerable Software and Affected Versions: Ocean Extra versions through 2.2.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in OceanWP Ocean Extra. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

8.8CVSS8.8AI score0.00059EPSS
Exploits0References6
Rows per page
Query Builder