Lucene search
+L

13156 matches found

Positive Technologies
Positive Technologies
•added 2025/02/20 12:00 a.m.•16 views

PT-2025-31369

Name of the Vulnerable Software and Affected Versions Moby versions prior to 28.0.0 Moby version 25.0.13 Description Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products...

5.2CVSS6.4AI score0.00155EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/02/20 12:00 a.m.•22 views

PT-2025-7566 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 V1.0 V15.03.06.23 Description: The issue is related to a buffer overflow in form fast setting wifi set via the ssid parameter. This can potentially be exploited, although specific details about the number of affected devices or...

9.8CVSS7.6AI score0.0045EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/02/20 12:00 a.m.•23 views

PT-2025-7568 · Tenda · Tenda I12

Name of the Vulnerable Software and Affected Versions: Tenda i12 version 1.0.0.103805 Description: A buffer overflow issue was discovered in the formwrlSSIDset function through the list parameter. This issue may allow for unauthorized access or code execution. No information is provided about the...

9.8CVSS9.7AI score0.0045EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/02/20 12:00 a.m.•17 views

PT-2025-7442 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI version 2024R1.2.2 Description: The issue allows unauthenticated users to access multiple pages that display the usernames and email addresses of all current users. This is an Information Disclosure vulnerability. Recommendations: F...

6.5CVSS9.2AI score0.01649EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2025/02/20 12:00 a.m.•23 views

PT-2025-7543 · Qibosoft · Qibocms

Name of the Vulnerable Software and Affected Versions: QiboSoft QiboCMS version X1.0 Description: An issue in QiboSoft QiboCMS allows a remote attacker to obtain sensitive information via the http curl function in the '/application/common.php' file that directly retrieves the URL request response...

7.5CVSS6.1AI score0.00463EPSS
SaveExploits0References7
OSV
OSV
•added 2025/02/19 7:17 a.m.•33 views

BIT-PYTHON-2024-3220

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the...

2.3CVSS6.2AI score0.00521EPSS
SaveExploits0References2
OSV
OSV
•added 2025/02/19 7:17 a.m.•14 views

BIT-PYTHON-MIN-2024-3220

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the...

2.3CVSS6.2AI score0.00521EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/19 12:00 a.m.•22 views

PT-2025-7508 · Baiyi · Baiyi Cloud Asset Management System

Name of the Vulnerable Software and Affected Versions: Baiyi Cloud Asset Management System versions up to 20250204 Description: A critical issue has been found in the Baiyi Cloud Asset Management System, affecting some unknown processing of the file /wuser/admin.house.collect.php. The manipulatio...

7.5CVSS7.7AI score0.00475EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2025/02/19 12:00 a.m.•12 views

PT-2025-16978 · D Link · D-Link Dir 832

Name of the Vulnerable Software and Affected Versions: D-Link DIR 832x version 240802 Description: The issue allows a remote attacker to execute arbitrary code. This is achieved via the target addr key value and the 0x41710c function. Recommendations: For D-Link DIR 832x version 240802, as a...

9.8CVSS7AI score0.01382EPSS
SaveExploits1References9
Vulnrichment
Vulnrichment
•added 2025/02/18 5:38 p.m.•10 views

CVE-2025-25300 smartbanner.js rel noopener XSS vulnerability

smartbanner.js is a customizable smart app banner for iOS and Android. Prior to version 1.14.1, clicking on smartbanner View link and navigating to 3rd party page leaves window.opener exposed. It may allow hostile third parties to abuse window.opener, e.g. by redirection or injection on the...

5.3CVSS7AI score0.00419EPSS
SaveExploits0References2
OSV
OSV
•added 2025/02/18 5:38 p.m.•17 views

CVE-2025-25300 smartbanner.js rel noopener XSS vulnerability

smartbanner.js is a customizable smart app banner for iOS and Android. Prior to version 1.14.1, clicking on smartbanner View link and navigating to 3rd party page leaves window.opener exposed. It may allow hostile third parties to abuse window.opener, e.g. by redirection or injection on the...

5.3CVSS6.7AI score
SaveExploits0References4
Gentoo Linux
Gentoo Linux
•added 2025/02/18 12:00 a.m.•24 views

OpenSSH: Multiple Vulnerabilities

Background OpenSSH is a free application suite consisting of server and clients that replace tools like telnet, rlogin, rcp and ftp with more secure versions offering additional functionality. Description Multiple vulnerabilities have been discovered in OpenSSH. Please review the CVE identifiers...

6.8CVSS7.5AI score0.4065EPSS
SaveExploits6
Positive Technologies
Positive Technologies
•added 2025/02/16 12:00 a.m.•18 views

PT-2025-6897 · Microworld · Microword Escan Antivirus

Name of the Vulnerable Software and Affected Versions: MicroWord eScan Antivirus version 7.0.32 Description: A critical issue has been discovered affecting the sprintf function of the USB Password Handler component. This issue leads to a buffer overflow. The attack must be approached locally,...

5.3CVSS7AI score0.00363EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2025/02/16 12:00 a.m.•23 views

PT-2025-6881

Name of the Vulnerable Software and Affected Versions NUUO Camera versions prior to 20250203 Description A critical issue exists in NUUO Camera that allows for remote command injection. The issue affects the print file function within the /handle config.php file. Manipulation of the log argument...

7.5CVSS7.8AI score0.51116EPSS
SaveExploits1References15
Positive Technologies
Positive Technologies
•added 2025/02/16 12:00 a.m.•19 views

PT-2025-6884 · Pmweb · Pmweb

Name of the Vulnerable Software and Affected Versions: PMWeb version 7.2.0 Description: A problem has been detected in the Setting Handler component, leading to weak password requirements. The attack can be initiated remotely and has a high complexity, making exploitation difficult. The exploit h...

6.3CVSS7.1AI score0.011EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2025/02/16 12:00 a.m.•21 views

PT-2025-6896

Name of the Vulnerable Software and Affected Versions: MicroWord eScan Antivirus version 7.0.32 Description: A critical issue has been found in the strcpy function of the VirusPopUp component, leading to a stack-based buffer overflow. The attack must be approached locally. The exploit has been...

7.8CVSS7AI score0.00342EPSS
SaveExploits1References11
NVD
NVD
•added 2025/02/14 5:15 p.m.•27 views

CVE-2024-3220

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the...

2.3CVSS0.00521EPSS
SaveExploits0References3
OSV
OSV
•added 2025/02/14 5:15 p.m.•11 views

UBUNTU-CVE-2024-3220

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the...

2.3CVSS6.5AI score0.00521EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/02/14 4:18 p.m.•30 views

CVE-2024-3220 Default mimetype known files writeable on Windows

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the...

2.3CVSS6.8AI score0.00521EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/14 4:18 p.m.•45 views

CVE-2024-3220 Default mimetype known files writeable on Windows

There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the...

2.3CVSS0.00521EPSS
SaveExploits0References1
Rows per page
Query Builder