Lucene search
+L

198340 matches found

Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•17 views

PT-2026-81451

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require use...

7.5CVSS5.4AI score0.00927EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-76816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client...

3.5CVSS5.9AI score0.00174EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•25 views

PT-2026-81284

Ech0 before 4.5.1 contains an authorization bypass vulnerability where session tokens skip scope validation in RequireScopes middleware, allowing logged-in non-admin users to access admin endpoints. Attackers can read system logs, visitor statistics, user emails, and subscribe to live WebSocket...

8.8CVSS5.2AI score0.00511EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-75509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to version 1.7.3,...

6.5CVSS5.9AI score0.00124EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•26 views

PT-2026-81126

Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values. Attackers can inject PDO DSN keys like host= and port= into the server...

6.9CVSS6AI score0.00434EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•20 views

PT-2026-81326

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description The Jobs API contains a flaw where the validate webhook url function fails open when a socket.gaierror occurs during DNS resolution. This allows the webhook url parameter to bypass validation if t...

6.8CVSS5.7AI score0.00342EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•26 views

PT-2026-81187

The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to, and including, 2.1.8 via the uploadMedia function. This is due to insufficient file type validation in the upload handler, which...

8.8CVSS6.2AI score0.00622EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•17 views

PT-2026-81819

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Safebrowsing component allows a remote attacker to bypass system access restrictions by using a crafted file. Recommendations Update Google Chrome to...

9.6CVSS6.5AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•13 views

PT-2026-81583

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the StorageAccessAPI allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...

9.6CVSS6.4AI score0.0056EPSS
SaveExploits1References335
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•13 views

PT-2026-81629

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Network component allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page...

9.6CVSS6.4AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•18 views

PT-2026-81664

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper state validation in the Parser allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google...

9.6CVSS7.2AI score0.0056EPSS
SaveExploits1References335
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•13 views

PT-2026-81689

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the input component allows a remote attacker to bypass the web origin policy. This occurs when an attacker has already compromised the renderer process and...

9.6CVSS6.4AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•13 views

PT-2026-81763

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in DevTools allows a remote attacker who has compromised the renderer process to bypass site isolation through the use of a crafted HTML page. Site isolation i...

9.6CVSS6.3AI score0.0056EPSS
SaveExploits1References335
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•18 views

PT-2026-81803

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the ReadingList component allows a remote attacker who has already compromised the renderer process to bypass the web origin policy. This is achieved by usi...

9.6CVSS6.5AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•19 views

PT-2026-81811

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Network component allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts how a document or...

9.6CVSS6.6AI score0.0056EPSS
SaveExploits1References335
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•21 views

PT-2026-81318

Name of the Vulnerable Software and Affected Versions praisonaiagents versions prior to 1.6.58 Description A Server-Side Request Forgery SSRF issue exists in the multi-agent teams system. The function host is blocked in spider tools.py fails to perform DNS resolution on hostnames before they are...

8.5CVSS5.9AI score0.00357EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•13 views

PT-2026-81613

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the ServiceWorker allows a remote attacker to bypass system access restrictions by using a crafted HTML page. A ServiceWorker is a script that the browser...

9.6CVSS6.4AI score0.0056EPSS
SaveExploits1References335
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•12 views

PT-2026-81774

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Preload component allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...

9.6CVSS6.4AI score0.0056EPSS
SaveExploits1References335
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•20 views

PT-2026-81606

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Improper input validation in the GPU component allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox. Th...

9.6CVSS7.1AI score0.0056EPSS
SaveExploits1References336
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•21 views

PT-2026-81458

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user...

5.5CVSS5.6AI score0.00263EPSS
SaveExploits0References2
Rows per page
Query Builder