Lucene search
+L

6867 matches found

Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•15 views

PT-2025-15810 · Unknown · Vite Coupon

Name of the Vulnerable Software and Affected Versions: Vite Coupon versions 1.0.7 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Remote Code Inclusion. This means an attacker can potentially execute malicious code on a remote server, which could...

10CVSS9.9AI score0.00329EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•16 views

PT-2025-15786 · WordPress · Push Notification For Wp

Name of the Vulnerable Software and Affected Versions: All push notification for WP versions 1.5.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Blind SQL Injection. This means an attacker could potentially force a user to perfor...

8.2CVSS8.9AI score0.00225EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•28 views

PT-2025-15864 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.2R3-S9 Junos OS versions 21.4 prior to 21.4R3-S10 Junos OS versions 22.2 prior to 22.2R3-S6 Junos OS versions 22.4 prior to 22.4R3 Junos OS versions 23.2 prior to 23.2R1-S2, 23.2R2 Description: An issue in the...

6.9CVSS6.4AI score0.00405EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•22 views

PT-2025-15862 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.2R3-S9 Junos OS versions from 21.4 before 21.4R3-S8 Junos OS versions from 22.2 before 22.2R3-S6 Junos OS versions from 22.4 before 22.4R3-S2 Junos OS versions from 23.2 before 23.2R2-S3 Junos OS versions from 23...

6.8CVSS6.5AI score0.00147EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•9 views

PT-2025-15667

Name of the Vulnerable Software and Affected Versions: GraphicsMagick versions prior to 8e56520 Description: The issue is related to a heap-based buffer over-read in the ReadJXLImage function in coders/jxl.c, which is connected to an ImportViewPixelArea call. Recommendations: For versions prior t...

9.1CVSS6.3AI score0.00359EPSS
SaveExploits1References42
Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•25 views

PT-2025-15866 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions 21.4 through 24.2R2, specifically: Junos OS versions 21.4 Junos OS versions 22.2 before 22.2R3-S6 Junos OS versions 22.4 before 22.4R3-S6 Junos OS versions 23.2 before 23.2R2-S3 Junos OS versions 23.4 before 23.4R2-S4 Junos ...

8.7CVSS6.4AI score0.00424EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•19 views

PT-2025-18471

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.11.0 Description A vulnerability in the Linux kernel has been resolved, related to the ethtool cmis cdb module. The issue arises from using the incorrect size of the rpl pointer in the ethtool cmis module poll...

7.8CVSS6.2AI score0.00197EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•21 views

PT-2025-15837 · Drupal · Drupal Web-T

Name of the Vulnerable Software and Affected Versions: Drupal WEB-T versions 0.0.0 through 1.1.0 Description: The issue affects Drupal WEB-T, allowing excessive allocation and content spoofing due to allocation of resources without limits or throttling and incorrect authorization. Recommendations...

6.5CVSS6.4AI score0.00445EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•17 views

PT-2025-15814 · WordPress · Wp Map Plugins Interactive Us Map

Name of the Vulnerable Software and Affected Versions: WP Map Plugins Interactive US Map versions n/a through 2.7 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in WP Map Plugins Interactive US Map. Recommendations: For versions n/a through 2.7,...

7.1CVSS7.3AI score0.00173EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/04/09 12:00 a.m.•61 views

Microsoft OneNote Security Feature Bypass Vulnerability (KB5002622)

This host is missing an important security update according to Microsoft KB5002622. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.8CVSS8.7AI score0.0082EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2025/04/09 12:00 a.m.•21 views

Debian: Security Advisory (DLA-4120-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.4CVSS5.5AI score0.00391EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/04/09 12:00 a.m.•28 views

Debian: Security Advisory (DSA-5897-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS6.6AI score0.00375EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/04/09 12:00 a.m.•13 views

Ubuntu: Security Advisory (USN-7424-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01353EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/04/09 12:00 a.m.•15 views

Debian: Security Advisory (DLA-4119-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS6.6AI score0.00375EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/04/09 12:00 a.m.•21 views

Ubuntu: Security Advisory (USN-7425-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.00472EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/04/09 12:00 a.m.•15 views

Ubuntu: Security Advisory (USN-7423-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.3CVSS5.2AI score0.01357EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•10 views

PT-2025-15469 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla versions up to 4.4.12 and 5.2.5 Description: The issue is related to insufficient state checks, which create a vector allowing attackers to bypass 2FA checks. This leads to improper authentication. Recommendations: For Joomla versions ...

7.5CVSS6.1AI score0.00402EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•21 views

PT-2025-15650 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier Description: The issue is related to an Insufficiently Protected Credentials vulnerability, which could lead to a security feature bypass. A high...

4CVSS6AI score0.0049EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•7 views

PT-2025-15625 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.8, 2022.6 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

7.8CVSS8AI score0.00243EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•11 views

PT-2025-15659 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.0 and earlier ColdFusion versions 2023.12 ColdFusion versions 2021.18 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which could le...

8.7CVSS8.4AI score0.19546EPSS
SaveExploits0References11
Rows per page
Query Builder