Lucene search
+L

106867 matches found

Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•26 views

PT-2026-103298

Name of the Vulnerable Software and Affected Versions JCTables version 1.21.1 Description An unauthenticated SQL injection exists in the front-end CRUD API controller. The component fails to perform Joomla token validation and authentication checks on any task. Table names, column names, and valu...

10CVSS5.9AI score0.0046EPSS
SaveExploits1References16
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•14 views

PT-2026-103614

Name of the Vulnerable Software and Affected Versions DB-GPT versions 0.7.5 and 0.8.0 Description A directory traversal issue exists in the python file upload function within the endpoint packages/dbgpt-app/src/dbgpt app/openapi/api v1/python upload api.py:42. This allows a remote attacker to wri...

9.1CVSS5.9AI score0.00857EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•12 views

PT-2026-103441

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, and denial of service...

7.8CVSS5.8AI score0.00125EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•16 views

PT-2026-103527

Name of the Vulnerable Software and Affected Versions Kiteworks Email Protection Gateway versions prior to 9.5.0 Description A path traversal weakness exists in an administrative import function. This flaw allows an authenticated administrator to write files to arbitrary locations on the server,...

7.2CVSS6.3AI score0.01547EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•15 views

PT-2026-103556

Name of the Vulnerable Software and Affected Versions Kiteworks appliance affected versions not specified Description A setup interface fails to properly confine user-supplied file paths to the intended directory. This allows an unauthenticated attacker with network access to the interface to wri...

7.4CVSS5.7AI score0.00991EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•14 views

PT-2026-103574

Name of the Vulnerable Software and Affected Versions Kiteworks Core affected versions not specified Description Two cluster-management operations fail to validate supplied file paths. This allows an attacker with root access on one cluster node to write files as root onto another node and trigge...

6.7CVSS5.7AI score0.00102EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•16 views

PT-2026-103576

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An unauthenticated attacker can write a file containing arbitrary content to the appliance filesystem. This is possible because an administrative upload handler...

7.5CVSS5.8AI score0.00322EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•13 views

PT-2026-103354

🚨 CVE-2026-47495 NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, informati...

7.8CVSS5.8AI score0.00127EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•13 views

PT-2026-103359

🚨 CVE-2026-47503 NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin, where a guest VM user may cause an out-of-bounds write by sending a crafted RPC message with invalid performance state list size parameters. A successful exploit of this...

7.8CVSS5.8AI score0.00127EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•16 views

PT-2026-103355

🚨 CVE-2026-47496 NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC call to the host. A successful exploit of this vulnerability might lead to escalation of...

7.3CVSS5.8AI score0.00117EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•7 views

PT-2026-103387

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description A firmware issue allows an attacker to perform an out-of-bounds write, which occurs when data is written outside the intended memory boundary. This cou...

7.8CVSS6AI score0.0018EPSS
SaveExploits0References101
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•15 views

PT-2026-103397

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description A flaw exists in the kernel mode layer that allows an attacker to perform an out-of-bounds write, which occurs when data is written outside the intende...

7.8CVSS6AI score0.0018EPSS
SaveExploits0References100
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•12 views

PT-2026-103379

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description A flaw exists in the kernel mode layer that allows an attacker to perform an out-of-bounds write, which occurs when data is written outside the intende...

7.8CVSS6AI score0.00146EPSS
SaveExploits0References100
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•8 views

PT-2026-103386

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Linux affected versions not specified Description A flaw exists in the kernel mode layer that allows an attacker to trigger an out-of-bounds write, which occurs when data is written outside the intended memory...

7.8CVSS6AI score0.0018EPSS
SaveExploits0References106
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•16 views

PT-2026-103390

🚨 CVE-2026-47541 NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...

7.8CVSS5.8AI score0.00127EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•11 views

PT-2026-103423

NVIDIA GPU Display Driver for Windows contains a vulnerability in the display driver DIAG escape handler where a local unprivileged attacker may cause an integer overflow and out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, and code execution...

7.8CVSS6.2AI score0.00134EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•9 views

PT-2026-103413

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Linux affected versions not specified Description A flaw exists in the kernel mode layer where a privileged user can trigger a race condition, resulting in an out-of-bounds write. This condition occurs when two or...

7.8CVSS5.9AI score0.00146EPSS
SaveExploits0References100
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•14 views

PT-2026-103421

Name of the Vulnerable Software and Affected Versions NVIDIA NVAPI for Windows affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of the intended buffer, potentially corrupting adjacent memory. This issue may allow an attacker to...

7.8CVSS5.8AI score0.00136EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/30 12:00 a.m.•16 views

CVE-2026-51864

DB-GPT v0.7.5 and v0.8.0 contains directory traversal in pythonfileupload packages/dbgpt-app/src/dbgptapp/openapi/apiv1/pythonuploadapi.py:42. A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary...

6AI score0.00857EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/30 12:00 a.m.•12 views

CVE-2026-51862

DB-GPT 0.8.0 contains directory traversal in skillupload packages/dbgpt-app/src/dbgptapp/openapi/apiv1/agenticdataapi.py:40. A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary...

5.9AI score0.00857EPSS
SaveExploits0References2
Rows per page
Query Builder