Lucene search
+L

6775 matches found

Positive Technologies
Positive Technologies
•added 2023/03/14 12:00 a.m.•17 views

PT-2023-21661 · Opendoas +1 · Opendoas +1

Name of the Vulnerable Software and Affected Versions: OpenDoas versions 6.8.2 and earlier Description: The issue allows privilege escalation due to sharing a terminal with the original session when TIOCSTI is available. TIOCSTI is unavailable in OpenBSD 6.0 and later, and can be made unavailable...

8.8CVSS8.5AI score0.00637EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2023/03/14 12:00 a.m.•24 views

PT-2023-20653 · Sap · Sap Netweaver Application Server Java

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for Java version 7.50 Description: The Cache Management Service in SAP NetWeaver Application Server for Java does not perform authentication checks for functionalities that require user identity...

5.3CVSS5.3AI score0.00476EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/03/13 12:00 a.m.•29 views

PT-2023-8987 · Akuvox · Akuvox E11

Name of the Vulnerable Software and Affected Versions: Akuvox E11 affected versions not specified Description: The issue is related to the Akuvox E11 secure shell SSH server, which is enabled by default and accessible by the root user with a password that cannot be changed by the user. This conce...

10CVSS9.3AI score0.00668EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/03/13 12:00 a.m.•19 views

PT-2023-13571 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is mentioned in the context of the National Vulnerability Database. No general information about the issue, estimated number of potentially affected devices, or real-world...

6.2AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/03/13 12:00 a.m.•18 views

PT-2023-16660 · Trellix · Trellix Intelligent Sandbox Cli

Name of the Vulnerable Software and Affected Versions: Trellix Intelligent Sandbox CLI versions 5.2 and earlier Description: A command injection issue allows a local user to inject and execute arbitrary operating system commands using specially crafted strings. This is due to insufficient...

6.7CVSS6.9AI score0.0037EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/03/11 12:00 a.m.•9 views

PT-2023-35691 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves functions such as xmlCurrentChar,...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/03/10 12:00 a.m.•34 views

PT-2025-18864

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A vulnerability has been resolved in the Linux kernel. The issue was found by Syzbot and is related to the ext4 file system. Specifically, it concerns the ext4 update inline data...

7.8CVSS6.2AI score0.00214EPSS
SaveExploits0
Intel
Intel
•added 2023/03/10 12:00 a.m.•33 views

Intel® Quartus® Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00244.html...

6AI score
SaveExploits0
Intel
Intel
•added 2023/03/10 12:00 a.m.•35 views

Intel® Optane™ DC Persistent Memory for Windows Advisory

Summary: A potential security vulnerability in the Intel® Optane™ DC Persistent Memory for Windows software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0106 Description: Incorrect default...

7.8CVSS7.7AI score0.00228EPSS
SaveExploits0
Intel
Intel
•added 2023/03/10 12:00 a.m.•35 views

Intel® Serial IO Driver for Intel® NUC 11 Gen Advisory

Summary: A potential security vulnerability in the Intel® Serial IO driver for Intel® NUC 11 Gen may allow escalation of privilege. Intel is releasing a software update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-33118 Description: Improper access control in t...

7.8CVSS7.8AI score0.00246EPSS
SaveExploits0
Intel
Intel
•added 2023/03/10 12:00 a.m.•49 views

Intel® RealSense™ DCM Advisory

Summary: A potential security vulnerability in the Intel® RealSense™ Depth Camera Manager DCM software may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-33119 Description: Improper access control ...

5.5CVSS5.1AI score0.0024EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/03/10 12:00 a.m.•14 views

PT-2025-18836

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc59af4eaa31c1f6c00c8f1e448ed99a45c66340dd5 Description A use-after-free UaF issue was reported in the Linux kernel, specifically in the mptcp module, at token lookup time after refactoring the passive sock...

8.7CVSS6.4AI score0.00204EPSS
SaveExploits0References24
Positive Technologies
Positive Technologies
•added 2023/03/09 12:00 a.m.•20 views

PT-2023-21005

Name of the Vulnerable Software and Affected Versions Best POS Management System version 1.0 Description A cross-site scripting XSS issue exists in the /kruxton/navbar.php file, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter. Thi...

6.1CVSS6.2AI score0.00434EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2023/03/09 12:00 a.m.•23 views

PT-2023-21159 · Unknown · Crossplane-Runtime

Name of the Vulnerable Software and Affected Versions: crossplane-runtime versions prior to 0.16.1 crossplane-runtime versions prior to 0.19.2 Description: An out of memory panic issue has been discovered in crossplane-runtime, a set of Go libraries used to build Kubernetes controllers in...

7.5CVSS7.4AI score0.00798EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2023/03/09 12:00 a.m.•17 views

PT-2023-16840 · Akinsoft · Akinsoft Wolvox

Name of the Vulnerable Software and Affected Versions: Akinsoft Wolvox versions prior to 8.02.03 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...

9.8CVSS9.6AI score0.00626EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2023/03/08 4:02 p.m.•19 views

Security Bulletin: IBM Robotic Process Automation is vulnerable to session tokens not being invalidated after password reset.

Summary IBM Robotic Process Automation session tokes are not invalidated after a password reset. IBM X-Force ID: 243710. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details IBM X-Force ID: 243710 DESCRIPTION: IBM Robotic Process Automation cou...

6.4AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2023/03/08 12:00 a.m.•24 views

PT-2023-19185 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.8 Description: A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To exploit this vulnerability, an...

8.8CVSS9AI score0.0103EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2023/03/08 12:00 a.m.•23 views

PT-2025-18813

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the ucsi connector change function. This issue occurs when ucsi init fails, resulting in a NULL...

6CVSS5.9AI score0.00202EPSS
SaveExploits0References452
Positive Technologies
Positive Technologies
•added 2023/03/07 12:00 a.m.•6 views

PT-2023-35452 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.169 Description: The issue is related to an underflow in second superblock position calculations in the nilfs2 file system. The actual impact and attack plausibility have not yet been proven...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/03/07 12:00 a.m.•17 views

PT-2023-12862 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, such as general information, estimated number of potentially affected devices...

6.5AI score
SaveExploits0References2
Rows per page
Query Builder