Lucene search
+L

116878 matches found

Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•18 views

PT-2026-88640

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Isolated component allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update Google Chrome to version 153.0.8010....

9.6CVSS6.5AI score0.00573EPSS
SaveExploits12References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•21 views

PT-2026-88644

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in Extensions allows a remote attacker to bypass system access restrictions to reach a privileged page by using a crafted HTML page. Recommendations Update Googl...

9.8CVSS6.6AI score0.00573EPSS
SaveExploits10References242
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•18 views

PT-2026-88648

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper state validation in the Installer allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome to version...

9.6CVSS6.6AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•12 views

PT-2026-88656

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the Browser component allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome to versio...

9.6CVSS6.5AI score0.00573EPSS
SaveExploits12References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•19 views

PT-2026-88660

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the Browser component allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome to versio...

9.6CVSS6.5AI score0.00573EPSS
SaveExploits12References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-88663

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An origin validation error in the Paint component allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Origin validation is a security mechanism that ensur...

9.6CVSS6.5AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•22 views

PT-2026-88685

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A double free issue exists in PDFium, a PDF rendering engine, which allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a specially crafted PDF...

9.6CVSS7.3AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-88691

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in Extensions allows a remote attacker to bypass system access restrictions by using a crafted Chrome extension. Recommendations Update Google Chrome to version...

9.6CVSS6.6AI score0.00573EPSS
SaveExploits10References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•16 views

PT-2026-88561

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in the Core component that allows a remote attacker to leak cross-origin data through the use of a crafted Chrome extension. Cross-origin data refers to...

9.6CVSS6.3AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•21 views

PT-2026-87104

A Cross-Site Request Forgery CSRF vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger unauthorized snapshot creation by tricking an authenticated administrator into visiting a specially crafted web page...

7CVSS6AI score0.00249EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/09/08 12:00 a.m.•20 views

The vulnerability of the application software interface of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B allows a hacker to execute arbitrary code.

The vulnerability of the application software interface of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of measures taken to neutralize special elements in the template creation mechanism...

10CVSS6.9AI score
SaveExploits0References4Affected Software3
Redos
Redos
•added 2026/09/08 12:00 a.m.•12 views

ROS-20260908-73-0076

The vulnerability in mongodb-org is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause service failures...

7.1CVSS6.9AI score0.00472EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•32 views

PT-2026-87807

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A flaw in the Windows Routing and Remote Access Service RRAS allows remote attackers to execute arbitrary code, potentially granting unauthorized access...

8.1CVSS6.5AI score0.0069EPSS
SaveExploits0References5
Redos
Redos
•added 2026/09/08 12:00 a.m.•13 views

ROS-20260908-73-0035

The vulnerability in Golang-X-Net is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...

6.1CVSS6.4AI score0.00223EPSS
SaveExploits0
Redos
Redos
•added 2026/09/07 12:00 a.m.•12 views

ROS-20260907-73-0527

The vulnerability in Java-21-openjdk is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5.3CVSS6.7AI score0.00411EPSS
SaveExploits0
Redos
Redos
•added 2026/09/07 12:00 a.m.•12 views

ROS-20260907-73-0528

The vulnerability in java-25-openjdk is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5.3CVSS6.7AI score0.00411EPSS
SaveExploits0
Redos
Redos
•added 2026/09/07 12:00 a.m.•11 views

ROS-20260907-73-0058

The vulnerability in Erlang is related to incorrect comparison of the number of connections. Exploiting this vulnerability allows a remote attacker to bypass existing security restrictions...

7.5CVSS7.2AI score0.0021EPSS
SaveExploits0
Redos
Redos
•added 2026/09/07 12:00 a.m.•11 views

ROS-20260907-73-0006

The vulnerability in libssh is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.3CVSS7.9AI score0.00168EPSS
SaveExploits0
Redos
Redos
•added 2026/09/07 12:00 a.m.•12 views

ROS-20260907-73-0511

The vulnerability in perl-Crypt-DSA is related to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

6.5CVSS6.9AI score0.0036EPSS
SaveExploits0
Redos
Redos
•added 2026/09/07 12:00 a.m.•12 views

ROS-20260907-73-0080

The vulnerability in dotnet8.0 is related to an exception handling error. Exploiting this vulnerability may allow a remote attacker to cause a service failure...

7.8CVSS7.4AI score0.00264EPSS
SaveExploits0
Rows per page
Query Builder