Lucene search
+L

296879 matches found

Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•13 views

PT-2026-94699

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7996 driver where the system fails to stop the attachment of wed hif2 for the secondary PCIe function if the primary WED attach fails. This results in an...

5.8AI score0.00209EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•9 views

PT-2026-94445

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the VMBus module where the initialization function hv acpi init does nothing when running in a non-nested root partition but still reports success, leading the module ...

5.8AI score0.00212EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•9 views

PT-2026-94449

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the hwmon notify event function is called using the platform device as the first parameter instead of the required hardware monitoring device...

5.8AI score0.00206EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•8 views

PT-2026-94645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/sun4i component where the sun4i crtc init function returns NULL instead of an error pointer when layer initialization fails. Because the caller function sun4i...

5.6AI score0.00211EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•7 views

PT-2026-94708

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the regulator core where schedule delayed work utilizes system wq, a non-freezable workqueue. This allows the regulator init complete work function to execute...

6.1AI score0.00245EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•9 views

PT-2026-94577

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme-apple driver where the admin queue, allocated via blk mq alloc queue, is not properly destroyed during removal. When the controller fails to initialize and is...

7.4CVSS5.5AI score0.00173EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•12 views

PT-2026-94565

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the verifier fails to properly compare iterator types during state pruning. Specifically, iterator stack slots can be...

7.8CVSS5.8AI score0.00175EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•9 views

CVE-2026-92501: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ext4: drain in-flight DIO before buffered write fallback generic/746 started failing intermittently on ext3 no-extent inodes. The test triggers 'Page cache invalidation failure on direct I/O' warnings and subsequent fsync returns...

5.8AI score0.00177EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•3 views

PT-2026-94945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mac80211 hwsim stop function when draining the data-pending queue. The process currently checks if the queue is empty using skb queue empty before calling...

5.7CVSS5.8AI score0.00205EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•7 views

PT-2026-94798

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi driver register function requests protocol devices before registering the driver. If the driver register function fails,...

5.8AI score0.00215EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•8 views

CVE-2026-92927: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /db/drugrecommendor.sql. Performing a manipulation results in information disclosure. The attack is possible to be carried out remotely. The exploit has been made...

6.9CVSS5.5AI score0.00532EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•11 views

CVE-2026-90360: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: regulator: core: use systemfreezablewq for init complete work scheduledelayedwork uses systemwq, which is non-freezable, allowing regulatorinitcompletework to run concurrently with system suspend. This work fires 30s after boot t...

6AI score0.00245EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•14 views

PT-2026-94801

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.6.0-0010.rc1.ctl4 Description A kernel NULL pointer dereference occurs when the amd pstate ut driver is loaded via modprobe on non-AMD platforms, such as Intel platforms. This issue is triggered within the amd pstate ut...

5.6AI score0.00206EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•14 views

PT-2026-95140

Name of the Vulnerable Software and Affected Versions Frappe Learning Management System LMS versions prior to 2.52.1 Description A remote attacker can request a traversal path handled by the SCORMRenderer.render function in lms/page renderers.py. The renderer constructs and opens a server-side pa...

8.7CVSS6AI score0.00676EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•15 views

PT-2026-94189

Name of the Vulnerable Software and Affected Versions Acer System Monitoring affected versions not specified Description The Acer System Monitoring component, included with NitroSense and PredatorSense, contains a hard-coded AES encryption key. AES Advanced Encryption Standard is a symmetric bloc...

5.1CVSS5.9AI score0.00099EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•4 views

PT-2026-95122

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.52 Description A race condition exists in the FileSystem component. A remote attacker who has compromised the renderer process and uses social engineering can bypass system access restrictions by...

9.6CVSS6.7AI score0.03507EPSS
SaveExploits9References303
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•9 views

PT-2026-95082

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists...

9.8CVSS5.9AI score0.00468EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•11 views

CVE-2025-55787: Improper Neutralization of Special Elements used in an SQL Command

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•10 views

CVE-2026-92926: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partnerpreference.php. Such manipulation of the argument education leads to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•10 views

CVE-2026-50609: Improper Access Control

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, thi...

9.3CVSS5.7AI score0.0013EPSS
SaveExploits0References2
Rows per page
Query Builder