Lucene search
+L

4255 matches found

Positive Technologies
Positive Technologies
added 2026/02/09 12:00 a.m.14 views

PT-2026-7109

Improper Authentication vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Senseway allows Authentication Abuse.This issue affects Senseway: through 09022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

7.3CVSS5.5AI score0.00292EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/03 2:31 p.m.4 views

CVE-2025-5319 SQLi in Emit Informatics' DIGITA Efficiency Management System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Emit Informatics and Communication Technologies Industry and Trade Ltd. Co. DIGITA Efficiency Management System allows SQL Injection. This issue affects DIGITA Efficiency Management System: through...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/03 2:31 p.m.13 views

CVE-2025-5319

CVE-2025-5319 affects Emit Informatics’ DIGITA Efficiency Management System (DIGITA EMS). Multiple connected sources describe an improper neutralization of special elements in SQL commands (SQL injection) as the root cause, with the DIGITA EMS affected through 03022026. The NVD/Red Hat records co...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/02/03 2:31 p.m.45 views

CVE-2025-5319 SQLi in Emit Informatics' DIGITA Efficiency Management System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Emit Informatics and Communication Technologies Industry and Trade Ltd. Co. DIGITA Efficiency Management System allows SQL Injection. This issue affects DIGITA Efficiency Management System: through...

9.8CVSS0.00421EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/03 8:22 a.m.6 views

CVE-2025-8456

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kod8 Software Technologies Trade Ltd. Co. Kod8 Individual and SME Website allows Reflected XSS. This issue affects Kod8 Individual and SME Website: through 03022026. NOTE: The vendor was...

7.6CVSS5.4AI score0.00175EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/02/03 12:00 a.m.5 views

EndRun Technologies Sonoma Cross-site Scripting (CVE-2025-60958)

Cross Site Scripting XSS vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

7.3CVSS5.3AI score0.00243EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/02/03 12:00 a.m.7 views

EndRun Technologies Sonoma OS Command Injection (CVE-2025-60959)

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

8.2CVSS5.3AI score0.00759EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/02/03 12:00 a.m.6 views

EndRun Technologies Sonoma Cross-site Scripting (CVE-2025-60967)

Cross Site Scripting XSS vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

7.3CVSS5.3AI score0.00243EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/02/03 12:00 a.m.7 views

EndRun Technologies Sonoma OS Command Injection (CVE-2025-60957)

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information. This plugin only works with Tenable.ot. Please...

9.9CVSS5.7AI score0.01198EPSS
SaveExploits0References2
HackRead
HackRead
added 2026/01/28 11:08 a.m.11 views

Best IT Managed Services for Large Enterprises

Learn what defines top-tier enterprise managed IT services, why they matter, and how Mindcore Technologies meets large-scale business demands...

5.9AI score
SaveExploits0
CNNVD
CNNVD
added 2026/01/26 12:00 a.m.16 views

Integrated DNA Technologies PC Audio code-related vulnerabilities

Integrated DNA Technologies PC Audio is an audio processing driver developed by Integrated DNA Technologies in the United States. Version 1.0.6499.0 of Integrated DNA Technologies PC Audio contains a code vulnerability. This vulnerability stems from the lack of quotation marks around the STacSV...

8.5CVSS6.1AI score0.0013EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/23 3:21 p.m.8 views

CVE-2025-10024

Authorization Bypass Through User-Controlled Key vulnerability in EXERT Computer Technologies Software Ltd. Co. Education Management System allows Parameter Injection.This issue affects Education Management System: through 23.09.2025...

7.5CVSS5.4AI score0.0035EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 11:45 a.m.34 views

CVE-2025-10024 IDOR in EXERT Computer Technologies' Education Management System

Authorization Bypass Through User-Controlled Key vulnerability in EXERT Computer Technologies Software Ltd. Co. Education Management System allows Parameter Injection. This issue affects Education Management System: through 23.09.2025...

7.5CVSS0.0035EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/22 11:45 a.m.2 views

CVE-2025-10024

Authorization Bypass Through User-Controlled Key vulnerability in EXERT Computer Technologies Software Ltd. Co. Education Management System allows Parameter Injection. This issue affects Education Management System: through 23.09.2025...

7.5CVSS5.4AI score0.0035EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/22 11:45 a.m.17 views

CVE-2025-10024

Technical details about CVE-2025-10024 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation are stated. Monitor for updates from vendors and security advisories.

7.5CVSS5.4AI score0.0035EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.8 views

PT-2026-3926

Authorization Bypass Through User-Controlled Key vulnerability in EXERT Computer Technologies Software Ltd. Co. Education Management System allows Parameter Injection.This issue affects Education Management System: through 23.09.2025...

7.5CVSS5.4AI score0.0035EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/21 7:19 a.m.9 views

CVE-2026-24016

The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely load Dynamic Link Libraries. Arbitrary code may be executed with the administrator privilege when the installer is executed...

8.4CVSS5.5AI score0.00136EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/01/21 7:19 a.m.10 views

EUVD-2026-3687

The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely load Dynamic Link Libraries. Arbitrary code may be executed with the administrator privilege when the installer is executed...

8.4CVSS5.5AI score0.00136EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/21 12:00 a.m.14 views

PT-2026-3757

Name of the Vulnerable Software and Affected Versions ServerView Agents for Windows affected versions not specified Description The installer for ServerView Agents for Windows, provided by Fsas Technologies Inc., may load Dynamic Link Libraries insecurely. This could allow for the execution of...

8.4CVSS7.4AI score0.00136EPSS
SaveExploits0References8
CVE
CVE
added 2026/01/12 3:26 a.m.34 views

CVE-2026-0853

CVE-2026-0853 affects certain NVR models from A-Plus Video Technologies. The underlying issue is a Sensitive Data Exposure that can be exploited by unauthenticated remote attackers to access the device’s debug page and retrieve device status information. Impact is described as exposure of status ...

6.9CVSS6.7AI score0.00271EPSS
SaveExploits0References2
Rows per page
Query Builder