Lucene search
+L

18987 matches found

Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.14 views

PT-2025-46453

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description The software contains an SQL injection issue due to improper neutralization of special elements used in SQL commands. This allows an authorized attacker to elevate privileges over a networ...

9CVSS6AI score0.01101EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.6 views

PT-2025-46486

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read issue exists in Microsoft Office Excel, potentially allowing an attacker to disclose information locally. Recommendations At the moment, there is no...

7.1CVSS5.2AI score0.00568EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.5 views

PT-2025-46496

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow exists in Microsoft Office Excel. This issue could allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is ...

7.8CVSS6AI score0.00474EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/11/10 12:0 a.m.13 views

PT-2025-46327

Name of the Vulnerable Software and Affected Versions Synology BeeStation OS versions prior to 1.3.2-65648 Description The Synology BeeStation OS contains a stack-based buffer overflow issue that allows for remote code execution. The flaw resides in the auth info component and can be exploited to...

10CVSS8.8AI score0.02762EPSS
SaveExploits0References25
EUVD
EUVD
added 2025/11/06 6:32 p.m.4 views

EUVD-2025-38120

Incorrect Privilege Assignment vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Privilege Escalation.This issue affects Atarim: from n/a through = 4.2...

9.8CVSS6.5AI score0.00384EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.21 views

PT-2025-45177

Name of the Vulnerable Software and Affected Versions AsIO3.sys affected versions not specified Description An improper restriction of operations within the bounds of a memory buffer exists in the AsIO3.sys driver. This can be triggered by manually executing a specially crafted process, potential...

7.3CVSS6.3AI score0.00121EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.9 views

PT-2025-45186

Name of the Vulnerable Software and Affected Versions IDIS ICM VIEWER affected versions not specified Description An argument injection issue exists that may allow an attacker to execute arbitrary code on the host machine. This could lead to remote code execution. Recommendations At the moment,...

8.8CVSS6.5AI score0.0045EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.16 views

PT-2025-45391

Name of the Vulnerable Software and Affected Versions affected versions not specified Description Insufficient sanitization allows an attacker to upload a specially crafted configuration file, leading to directory traversal and remote code execution with system-level permissions. Recommendations ...

9.8CVSS7.7AI score0.00661EPSS
SaveExploits0References8
OSV
OSV
added 2025/11/05 3:38 a.m.3 views

MINI-VQ37-W9J8-53F4

Bulletin has no description...

5.3CVSS7AI score0.00534EPSS
SaveExploits0
CNVD
CNVD
added 2025/11/05 12:0 a.m.47 views

Unspecified Vulnerability in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 (CNVD-2025-29076)

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. A security vulnerability exists in the Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 that stems from disabling email server...

10CVSS6.6AI score0.002EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/11/05 12:0 a.m.11 views

Unspecified Vulnerabilities in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 (CNVD-2025-29075)

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. A security vulnerability exists in the Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 that stems from a firmware version mismatch. ...

5.3CVSS6.8AI score0.00189EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/11/05 12:0 a.m.13 views

Unspecified Vulnerabilities in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. A security vulnerability exists in the Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 that stems from multiple devices sharing the...

10CVSS6.9AI score0.00389EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.8 views

PT-2025-44931

Name of the Vulnerable Software and Affected Versions WinBlast Driver affected versions not specified Description A memory corruption issue exists when accessing a buffer during IOCTL processing. This can lead to an out-of-bounds write condition. Recommendations At the moment, there is no...

7.8CVSS6.9AI score0.00079EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.15 views

PT-2025-44925

Name of the Vulnerable Software and Affected Versions Automotive Software platform based on QNX affected versions not specified Description A memory corruption issue exists when processing requests originating from GVM. The issue involves a dangerous method or function within the software platfor...

7.8CVSS6.5AI score0.00079EPSS
SaveExploits0References5
CVE
CVE
added 2025/11/03 8:2 a.m.19 views

CVE-2025-12623

CVE-2025-12623 affects the fushengqian fuint system, specifically the code path in fuint-application/src/main/java/com/fuint/module/clientApi/controller/ClientSignController.java (Authentication Token Handler). The Red Hat/NVD entries describe an authorization bypass that can be triggered remotel...

3.1CVSS6.3AI score0.00344EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/11/03 12:0 a.m.12 views

PT-2025-44767

Name of the Vulnerable Software and Affected Versions HP Client Management Script Library affected versions not specified Description A security issue has been reported in HP Client Management Script Library that could lead to privilege escalation during installation. The issue is being addressed...

8.5CVSS5.3AI score0.00187EPSS
SaveExploits0References4
OSV
OSV
added 2025/11/02 4:48 p.m.5 views

MINI-WWCJ-H838-FRMH

Bulletin has no description...

7.5CVSS6.6AI score0.00613EPSS
SaveExploits0
CNVD
CNVD
added 2025/10/31 12:0 a.m.7 views

Unspecified vulnerability in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 (CNVD-2025-29094)

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. A security vulnerability exists in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4, which stems from a failed logout feature. No...

6.9CVSS6.9AI score0.00189EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/10/31 12:0 a.m.8 views

Unspecified vulnerability in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 (CNVD-2025-29151)

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. A security vulnerability exists in the Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 that stems from a weak password policy. No...

10CVSS6.9AI score0.00319EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/31 12:0 a.m.11 views

PT-2025-44629

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The web application is susceptible to a clickjacking attack. This involves embedding a vulnerable page within a page controlled by an attacker to mislead users...

5.1CVSS6.4AI score0.00352EPSS
SaveExploits0References7
Rows per page
Query Builder