Lucene search
K

33 matches found

Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.4 views

PT-2025-45422

Name of the Vulnerable Software and Affected Versions code-projects Responsive Hotel Site version 1.0 Description A weakness exists in code-projects Responsive Hotel Site 1.0. This issue involves a SQL injection affecting an unknown function within the /admin/reservation.php file. The manipulatio...

5.8CVSS7.1AI score0.00029EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/09/17 12:0 a.m.1 views

PT-2025-38173

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw was discovered in the Linux kernel related to the alloc sk msg function. Specifically, alloc sk msg could be called from a non-sleepable context, potentially leading to issues...

6AI score0.00025EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/08/11 12:0 a.m.2 views

PT-2025-32568

Name of the Vulnerable Software and Affected Versions: ABB Aspect affected versions not specified Description: A missing authentication issue exists for a critical function in ABB Aspect. This allows unauthorized access to sensitive functionality. Recommendations: At the moment, there is no...

8.2CVSS6.2AI score0.00076EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/08/07 12:0 a.m.1 views

PT-2025-46631

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A flaw exists in the Linux kernel’s PM / devfreq subsystem, specifically within the mtk-cci component. The drv-sram reg pointer could be assigned an error value, potentially leading to a...

4.6CVSS7.3AI score0.00029EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/04/15 12:0 a.m.4 views

PT-2025-16496

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue is due to a lack of server-side input validation, allowing attackers to inject malicious JavaScript code into users' personal spaces of the web portal. Recommendations At the moment,...

9.8CVSS6.6AI score0.01275EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/03/06 12:0 a.m.1 views

PT-2025-25841

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the rseq feature. The issue occurs when the rseq cs field is non-zero during registration, which can cause a segfault on...

5.5CVSS6.4AI score0.00129EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/02/14 12:0 a.m.1 views

PT-2025-7015 · Unknown · Michelem Nofollow Free

Name of the Vulnerable Software and Affected Versions: michelem NoFollow Free versions 1.6.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations: For versions...

7.1CVSS9.3AI score0.00187EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/02/13 12:0 a.m.2 views

PT-2025-6828 · Schneider Electric · Asco 5310 Single-Channel Remote Annunciator

Name of the Vulnerable Software and Affected Versions: Schneider Electric - ASCO 5310 Single-Channel Remote Annunciator versions all Description: A Cleartext Transmission of Sensitive Information issue exists, potentially exposing data when network traffic is being intercepted by an attacker. Thi...

8.7CVSS6.8AI score0.00161EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/01/21 12:0 a.m.2 views

PT-2025-4838 · Ambari · Ambari

Name of the Vulnerable Software and Affected Versions: Ambari affected versions not specified Description: A code injection vulnerability exists in the Ambari Alert Definition feature, allowing authenticated users to inject and execute arbitrary shell commands. The vulnerability arises when...

8.8CVSS8.2AI score0.02023EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2025/01/15 12:0 a.m.18 views

PT-2025-4460 · Learndash · Faizaan Gagan Course Migration For Learndash

Name of the Vulnerable Software and Affected Versions: Faizaan Gagan Course Migration for LearnDash versions 1.0.2 through n/a Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. This means an attacker can potentiall...

6.4CVSS9.4AI score0.00253EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/10/08 12:0 a.m.1 views

PT-2024-6921 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in Windows Storage. It allows attackers to affect the system by exploiting errors in symbolic link handling, potentially...

7.8CVSS6.3AI score0.0071EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2024/09/10 12:0 a.m.1 views

PT-2024-38518 · Phoenix Contact · Fl Mguard 2102 +46

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A low privileged remote attacker can get access to CSRF tokens of higher privileged users, which can be abused to mount CSRF attacks. Recommendations: A...

5.7CVSS7AI score0.0019EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2024/07/09 12:0 a.m.1 views

PT-2024-27483 · Microsoft · Sql Server Native Client Ole Db Provider

Name of the Vulnerable Software and Affected Versions: SQL Server Native Client OLE DB Provider affected versions not specified Description: The issue concerns a remote code execution vulnerability. There is no information provided about the estimated number of potentially affected devices...

8.8CVSS7.7AI score0.03005EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/05/23 12:0 a.m.4 views

PT-2024-4243 · Google +6 · Google Chrome +7

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 126.0.6478.54 Microsoft Edge versions affected versions not specified Description: The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to potentially perform out of...

10CVSS7.3AI score0.93301EPSS
Exploits128References1161
Positive Technologies
Positive Technologies
added 2024/05/06 12:0 a.m.3 views

PT-2024-18547 · Mediatek +1 · Mt6580 +24

Name of the Vulnerable Software and Affected Versions: In da affected versions not specified Description: The issue is related to a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User...

5.9CVSS7.1AI score0.00016EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/03/17 12:0 a.m.2 views

PT-2024-21080 · Jurecapuder · Androidweatherapp

Name of the Vulnerable Software and Affected Versions: jurecapuder AndroidWeatherApp version 1.0.0 Description: A problematic vulnerability was found in the AndroidWeatherApp, affecting an unknown function of the file androidmanifest.xml of the component Backup File Handler. This leads to exposur...

1.8CVSS6.9AI score0.00025EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2024/02/29 12:0 a.m.1 views

PT-2024-21599 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel, where the frequency table arrays are not properly terminated with an empty element. This can lead to possible out-of-bound access when the tab...

9.1CVSS6.5AI score0.00407EPSS
Exploits0References660
Positive Technologies
Positive Technologies
added 2023/12/28 12:0 a.m.1 views

PT-2023-18952 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to a type confusion vulnerability. Successful exploitation of this vulnerability could cause an information leak. Recommendations: At the moment, there is no...

7.1CVSS6.6AI score0.0003EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2023/12/04 12:0 a.m.1 views

PT-2023-24184 · Qualcomm · 315 5G Iot Modem Firmware +236

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a transient Denial of Service DOS that occurs while parsing WPA IES when it is passed with a length more than the expected size...

7.5CVSS6.9AI score0.00188EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/12/01 12:0 a.m.2 views

PT-2023-8468 · Unknown · Powervr Gpu Driver

Name of the Vulnerable Software and Affected Versions: PowerVR GPU driver versions affected versions not specified Description: The issue is related to a buffer overflow in the PowerVR GPU driver, specifically in the PMR ReadBytes function for Android and ChromeOS, and an out of bounds write in t...

9.8CVSS8.9AI score0.00105EPSS
Exploits0References9
Rows per page
Query Builder