Lucene search
+L

6772 matches found

OpenVAS
OpenVAS
added 2026/01/08 12:0 a.m.3 views

Ubuntu: Security Advisory (USN-7943-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.0273EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.10 views

PT-2026-1738

Name of the Vulnerable Software and Affected Versions Kaira Blockons versions through 1.2.15 Description A missing authorization issue exists in Kaira Blockons. The issue allows access to functionality that is not properly constrained by Access Control Lists ACLs. Recommendations Update Kaira...

9.8CVSS6.5AI score0.00298EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.19 views

PT-2026-2192

Name of the Vulnerable Software and Affected Versions Bulk Landing Page Creator for WordPress LPagery versions through 2.4.9 Description The software contains a missing authorization issue, allowing exploitation of incorrectly configured access control security levels. Recommendations Update to a...

5.4CVSS6.4AI score0.00176EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.15 views

PT-2026-2141

Name of the Vulnerable Software and Affected Versions Greenshot versions 1.3.310 and below Description Greenshot is a Windows screenshot utility. Versions 1.3.310 and below are susceptible to an OS Command Injection issue due to inadequate sanitization of filenames. The FormatArguments method...

7.7CVSS7.7AI score0.00912EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.25 views

PT-2026-1866

Name of the Vulnerable Software and Affected Versions JimuReport versions through 2.1.3 Description The software is susceptible to remote code execution when handling user-supplied H2 JDBC URLs. The application directly passes the attacker-controlled JDBC URL to the H2 driver, enabling the use of...

9.8CVSS7.2AI score0.0096EPSS
SaveExploits1References8
OpenVAS
OpenVAS
added 2026/01/08 12:0 a.m.8 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2026-1007)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.7AI score0.00162EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2026/01/08 12:0 a.m.7 views

Debian: Security Advisory (DSA-6095-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS6.5AI score0.00163EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2026/01/08 12:0 a.m.6 views

Google Chrome Security Update (stable-channel-update-for-desktop-2026-01) - Linux

Google Chrome is prone to an insufficient policy enforcement vulnerability. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS6.9AI score0.06658EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2026/01/08 12:0 a.m.5 views

openSUSE Security Advisory (SUSE-SU-2026:0036-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

1.9CVSS6.5AI score0.00102EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.17 views

PT-2026-1885

Name of the Vulnerable Software and Affected Versions Nitro PDF Pro versions prior to 14.42.0.34 Description The software can display signer information from a non-verified PDF field instead of the verified certificate subject, potentially presenting inconsistent signer details. The display logic...

9.8CVSS6.4AI score0.00087EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.7 views

PT-2026-1892

Name of the Vulnerable Software and Affected Versions Arraytics Timetics versions n/a through 1.0.46 Description The software contains an authentication bypass issue allowing authentication abuse through an alternate path or channel. Recommendations Update Arraytics Timetics to a version later th...

9.8CVSS6.8AI score0.00385EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.9 views

PT-2026-1741

Name of the Vulnerable Software and Affected Versions THEMELOGI Navian versions through 1.5.4 Description A flaw exists in THEMELOGI Navian that allows for PHP Local File Inclusion due to improper control of filename for include/require statements. This issue is related to a PHP Remote File...

9.8CVSS6.7AI score0.00419EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2026/01/08 12:0 a.m.7 views

Ubuntu: Security Advisory (USN-7945-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.012EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2026/01/08 12:0 a.m.7 views

Debian: Security Advisory (DLA-4435-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.5CVSS6.5AI score0.00169EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.10 views

PT-2026-1603

Name of the Vulnerable Software and Affected Versions WP Recipe Manager plugin for WordPress versions prior to 1.0.1 Description The WP Recipe Manager plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to insufficient input sanitization and output escaping on...

6.4CVSS5.9AI score0.00243EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.11 views

PT-2026-1676

Name of the Vulnerable Software and Affected Versions FaceSentry Access Control System version 6.4.8 Description The FaceSentry Access Control System is susceptible to a cleartext transmission issue. This allows remote attackers to intercept authentication credentials through man-in-the-middle...

9.1CVSS6.7AI score0.00309EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.26 views

PT-2026-2103

Name of the Vulnerable Software and Affected Versions Tarkov Data Manager versions prior to 02 January 2025 Description The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to 02 January 2025, a reflected Cross Site Scripting XSS vulnerability exists in the toast notification...

9.3CVSS5.8AI score0.00206EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.14 views

PT-2026-1563

Name of the Vulnerable Software and Affected Versions MoneySpace plugin for WordPress versions prior to 2.13.9 Description The MoneySpace plugin for WordPress exhibits a sensitive information exposure issue. The plugin stores complete payment card details – including Primary Account Number PAN,...

8.6CVSS6.6AI score0.00378EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.12 views

PT-2026-1678

Name of the Vulnerable Software and Affected Versions Yahei-PHP Prober version 0.4.7 Description The software contains a remote HTML injection issue that enables attackers to execute arbitrary HTML code. This is achieved by injecting malicious HTML code into the speed GET parameter of the...

6.1CVSS6.8AI score0.00242EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.16 views

PT-2026-2062

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. A NULL pointer dereference issue exists in the signature parser in version...

5.5CVSS6.6AI score0.00161EPSS
SaveExploits1References9
Rows per page
Query Builder