Lucene search
+L

170 matches found

Positive Technologies
Positive Technologies
added 2022/12/23 12:0 a.m.11 views

PT-2022-18889 · Unknown · Ydb Server

Name of the Vulnerable Software and Affected Versions: YDB server affected versions not specified Description: An out-of-bounds read was discovered in the YDB server, allowing an attacker to construct a query with an insert statement to read sensitive information from other memory locations or...

9.1CVSS8.9AI score0.00671EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/12/13 12:0 a.m.8 views

PT-2022-27760 · Siemens · Ruggedcom Rm1224 Lte(4G) Eu +151

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns devices that store CLI user passwords encrypted in flash memory. Attackers with physical access to the device could potentially...

5.7CVSS6.8AI score0.00262EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/12/11 12:0 a.m.5 views

PT-2023-22486 · Unknown +4 · Llvm-Project +4

Name of the Vulnerable Software and Affected Versions: llvm-project affected versions not specified Description: A segmentation fault was discovered in the llvm-project via the component mlir::Block::getArgument. This issue affects the mlir::Block::getArgument component, which is part of the...

5.5CVSS4.6AI score0.00221EPSS
SaveExploits0References31
Positive Technologies
Positive Technologies
added 2022/12/06 12:0 a.m.11 views

PT-2022-24718 · Unknown · Power Management Service

Name of the Vulnerable Software and Affected Versions: Power management service affected versions not specified Description: A missing permission check in the power management service could allow it to be set up without requiring additional execution privileges. Recommendations: At the moment,...

7.8CVSS7AI score0.00151EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/10/28 12:0 a.m.11 views

PT-2022-23907 · Unknown · Seccome Ehoney

Name of the Vulnerable Software and Affected Versions: seccome Ehoney affected versions not specified Description: A critical issue has been found in seccome Ehoney, affecting the processing of the file "/api/v1/attack". The manipulation of the AttackIP argument leads to SQL injection. This issue...

9.8CVSS9.7AI score0.00449EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/10/17 12:0 a.m.7 views

PT-2022-36688 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. The crash state indicates involvement of the AffixMgr functions, specifically suffix check,...

6.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/10/14 12:0 a.m.1 views

PT-2022-24517 · Unknown · Soundrecorder

Name of the Vulnerable Software and Affected Versions: soundrecorder affected versions not specified Description: The issue is related to a missing permission check in the soundrecorder service. This could potentially lead to elevation of privilege in the contacts service, and it does not require...

7.8CVSS7.4AI score0.00158EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/08/23 12:0 a.m.4 views

PT-2022-10610 · Unknown · Ansible-Runner

Name of the Vulnerable Software and Affected Versions: ansible-runner affected versions not specified Description: A race condition flaw was found, allowing an attacker to potentially access ansible-runner's private data dir by substituting their directory at the name of a temporary directory. Th...

6.3CVSS6.1AI score0.00195EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2022/05/03 12:0 a.m.4 views

PT-2022-3136 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Installer service, which is caused by insufficient access restrictions. This vulnerability can be...

7.8CVSS9.3AI score0.04533EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2022/03/07 12:0 a.m.18 views

PT-2022-4330 · Unknown +5 · Xen Hypervisor +5

Name of the Vulnerable Software and Affected Versions: Xen hypervisor affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the gntalloc driver of the Xen hypervisor. Exploitation of this issue may allow an attacker to cause a...

8.8CVSS7.5AI score0.94921EPSS
SaveExploits226References610
Positive Technologies
Positive Technologies
added 2022/03/03 12:0 a.m.6 views

PT-2022-10740 · Unknown · Basebmpsupportlib

Name of the Vulnerable Software and Affected Versions: BaseBmpSupportLib affected versions not specified Description: The issue is related to a Heap Overflow in BaseBmpSupportLib. No information is provided about the estimated number of potentially affected devices worldwide or real-world inciden...

9.8CVSS6.1AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/02/09 12:0 a.m.16 views

PT-2022-14284 · Unknown · Ion Driver

Name of the Vulnerable Software and Affected Versions: ion driver affected versions not specified Description: The issue is related to an incorrect bounds check in the ion driver, which could lead to local information disclosure without requiring additional execution privileges. User interaction ...

5.5CVSS5.1AI score0.00118EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/02/08 12:0 a.m.7 views

PT-2022-1655 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The vulnerability is related to incorrect code generation management in the Windows Hyper-V hardware virtualization system. It allows remote attackers to execute arbitrary code on t...

7.9CVSS8AI score0.00965EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2022/01/04 12:0 a.m.11 views

PT-2022-14260 · Unknown · Vow Driver

Name of the Vulnerable Software and Affected Versions: vow driver affected versions not specified Description: The issue is related to a possible memory corruption in the vow driver due to improper input validation. This could lead to local escalation of privilege, with System execution privilege...

6.7CVSS6.6AI score0.00113EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/12/28 12:0 a.m.3 views

PT-2021-23403 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize use...

6.6CVSS5.8AI score0.0046EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2021/11/30 12:0 a.m.7 views

PT-2021-22847 · Bookstack · Bookstack

Name of the Vulnerable Software and Affected Versions: bookstack affected versions not specified Description: The issue is related to Improper Access Control. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

6.5CVSS5.1AI score0.00897EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2021/11/27 12:0 a.m.5 views

PT-2021-22841 · Unknown +1 · Janus-Gateway +1

Name of the Vulnerable Software and Affected Versions: janus-gateway affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize user...

8.8CVSS8.2AI score0.00942EPSS
SaveExploits2References17
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.4 views

PT-2022-9183 · Almalinux +3 · Almalinux +3

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: No detailed information is provided about the issue, except that it is referred to as 'Уязвимость CVE-2021-20325'. Recommendations: At the momen...

10CVSS9.2AI score0.01593EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2021/07/13 12:0 a.m.12 views

PT-2021-6953 · Microsoft · Windows Container Isolation Fs Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Container Isolation FS Filter Driver affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Container Isolation FS Filter Driver, which can be exploited to elevate...

7.8CVSS7.8AI score0.00525EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2021/05/18 12:0 a.m.19 views

PT-2021-19242 · Unknown · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel affected versions not specified Description: The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection issue, which can lead to root Remote Code Execution. Recommendations: At the moment, there ...

10CVSS9.8AI score0.34062EPSS
SaveExploits1References3
Rows per page
Query Builder