Lucene search
+L

3196 matches found

Positive Technologies
Positive Technologies
•added 2025/05/13 12:00 a.m.•17 views

PT-2025-20879 · Unknown · Domainspro

Name of the Vulnerable Software and Affected Versions: DomainsPRO version 1.2 Description: The issue is an SQL injection vulnerability that could allow an attacker to retrieve, create, update, and delete databases. This is achieved via the d parameter in the "/article.php" endpoint...

9.3CVSS7.2AI score0.00355EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/05/13 12:00 a.m.•16 views

PT-2025-21052 · Intel · Intel Data Center Gpu Flex Series

Name of the Vulnerable Software and Affected Versions: IntelR Data Center GPU Flex Series for Windows versions prior to 31.0.101.4314 Description: The issue is related to improper buffer restrictions for some IntelR Data Center GPU Flex Series for Windows drivers. This may allow an authenticated...

8.2CVSS6.3AI score0.00172EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/05/13 12:00 a.m.•11 views

PT-2025-20981 · Microsoft · Office Excel +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. This issue enables remote attackers to execute arbitrary code...

7.8CVSS9.6AI score0.00663EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2025/05/13 12:00 a.m.•14 views

PT-2025-21065

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi Software for Windows versions prior to 23.100 Description: The issue is related to a use after free condition that may allow an unauthenticated user to potentially enable denial of service via adjacent access...

8.3CVSS6.4AI score0.0026EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/05/13 12:00 a.m.•25 views

PT-2025-21097

Name of the Vulnerable Software and Affected Versions: IntelR Network Adapter Driver versions prior to 29.4 Description: The issue concerns an uncontrolled search path element in some IntelR Network Adapter Driver installers for Windows 11, which may allow an authenticated user to potentially...

6.7CVSS6.7AI score0.00161EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/05/13 12:00 a.m.•22 views

PT-2025-20855 · Siemens · User Management +4

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo versions 4.1 through 5.0 SINEC NMS affected versions not specified SINEMA Remote Connect affected versions not specified Totally Integrated Automation Portal TIA Portal versions 17 through 20 User Management Component UMC...

8.7CVSS7.2AI score0.0065EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/05/13 12:00 a.m.•24 views

PT-2025-20918 · Unknown · Upset-Gal-Web

Name of the Vulnerable Software and Affected Versions: upset-gal-web version 7.1.0 Description: The issue concerns an arbitrary file read. It affects the /api/music/v1/cover.ts endpoint. Recommendations: For version 7.1.0, consider restricting access to the /api/music/v1/cover.ts endpoint until a...

7.5CVSS6.6AI score0.00556EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/05/13 12:00 a.m.•22 views

PT-2025-20858 · Unknown · Iec 3Ph 22Kw Child Socket/ Shutter +29

Name of the Vulnerable Software and Affected Versions: IEC 1Ph 7.4kW Child socket versions prior to V2.135 IEC 1Ph 7.4kW Child socket/ shutter versions prior to V2.135 IEC 1Ph 7.4kW Parent cable 7m versions prior to V2.135 IEC 1Ph 7.4kW Parent cable 7m incl. SIM versions prior to V2.135 IEC 1Ph...

8.8CVSS6.3AI score0.00286EPSS
SaveExploits0References6
CVE
CVE
•added 2025/05/12 11:31 a.m.•73 views

CVE-2025-40626

CVE-2025-40626 corresponds to a reflected XSS in AbanteCart v1.4.0. The issue affects the /about_us endpoint where a malicious XSS payload can be reflected to the victim, enabling JavaScript execution that could steal session cookies or perform actions on behalf of the user, as described in multi...

6.1CVSS5.6AI score0.00238EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2025/05/12 7:15 a.m.•44 views

CVE-2025-4560

The ISOinsight from Netvision has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access certain system functions. These functions include viewing the administrator list, viewing and editing IP settings, and uploading files...

6.9CVSS0.00354EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/05/12 12:00 a.m.•19 views

PT-2025-20718 · Schweitzer Engineering Laboratories · Sel Blueframe Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An administrator could discover another account's credentials. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

5.8CVSS6.1AI score0.00301EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/05/12 12:00 a.m.•8 views

PT-2025-25202

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.5.x through 10.5.4 Mattermost versions 9.11.x through 9.11.13 Description The issue allows guest users to bypass permissions and view information about public teams they are not members of via a direct API call to...

4.3CVSS5.9AI score0.00222EPSS
SaveExploits0References46
Positive Technologies
Positive Technologies
•added 2025/05/12 12:00 a.m.•7 views

PT-2025-20781

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7.6 macOS Sequoia versions prior to 15.5 macOS Sonoma versions prior to 14.7.6 iPadOS versions prior to 17.7.7 Description The issue involves a double free condition addressed through improved memory management. This...

6.5CVSS5.7AI score0.00202EPSS
SaveExploits0References23
Positive Technologies
Positive Technologies
•added 2025/05/12 12:00 a.m.•15 views

PT-2025-20691 · Invelos +1 · Dvdprofiler +1

Name of the Vulnerable Software and Affected Versions: julmud/phpDVDProfiler versions v 20230807 through v 20250510 Description: The issue concerns cross-site scripting in the search function of the software. This allows for potential malicious script execution when a user interacts with the sear...

5.3CVSS5.9AI score0.0049EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2025/05/12 12:00 a.m.•19 views

PT-2025-20716

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An authenticated administrator could modify the Created By username for a user account. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

2.7CVSS6AI score0.00263EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/05/12 12:00 a.m.•9 views

PT-2025-20763 · Apple · Ios +6

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.5 tvOS versions prior to 18.5 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 Description: The issue allows an app to access sensitive...

5.5CVSS5.5AI score0.00209EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2025/05/12 12:00 a.m.•7 views

PT-2025-20775 · Apple · Macos Sequoia +6

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.5 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iPadOS versions prior to 18.5 iOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 Description: A logic issue...

5.5CVSS5.6AI score0.0025EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2025/05/12 12:00 a.m.•26 views

PT-2025-20705 · Toolhive · Toolhive

Name of the Vulnerable Software and Affected Versions: ToolHive versions prior to 0.0.33 Description: The issue arises from the ordering of code used to start a Model Context Protocol MCP server container in ToolHive, inadvertently storing secrets in run config files. This allows an attacker with...

2.4CVSS6.4AI score0.00135EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/05/12 12:00 a.m.•7 views

PT-2025-20779 · Apple · Ipados +8

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.5 macOS Sonoma versions prior to 14.7.6 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions...

6.5CVSS5.5AI score0.01283EPSS
SaveExploits0References22
Positive Technologies
Positive Technologies
•added 2025/05/12 12:00 a.m.•8 views

PT-2025-20769 · Apple · Macos Ventura +8

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.5 macOS Sonoma versions prior to 14.7.6 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions...

7.1CVSS6.7AI score0.01111EPSS
SaveExploits0References24
Rows per page
Query Builder