Lucene search
+L
PtsecurityMost viewed

200111 matches found

Positive Technologies
Positive Technologies
added 2026/05/04 12:0 a.m.45 views

PT-2026-36763

Name of the Vulnerable Software and Affected Versions osrg GoBGP versions prior to 4.4.0 Description A remote denial of service can occur in the SRv6 L3 Service component. The issue exists within the SRv6L3ServiceAttribute.DecodeFromBytes function located in the pkg/packet/bgp/prefix sid.go file,...

7.5CVSS6.3AI score0.00464EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/01 12:0 a.m.45 views

PT-2026-38395

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.0 Description Sandboxed code can call the Buffer.alloc function with an arbitrary size to allocate memory directly on the host heap. Because Buffer.alloc is a synchronous C++ native call, the timeout option cannot...

7.8CVSS6AI score0.00419EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2026/04/24 12:0 a.m.45 views

PT-2026-35018

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix incorrect return value after changing leaf in lookup extent data ref After commit 1618aa3c2e01 "btrfs: simplify return variables in lookup extent data ref", the err and ret variables were merged into a single ret...

5.4AI score0.0012EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/20 12:0 a.m.45 views

PT-2026-46942

Name of the Vulnerable Software and Affected Versions X.Org X server affected versions not specified Xwayland affected versions not specified Description An out-of-bounds read flaw exists in the glXDisp ChangeDrawableAttributes function. Due to an incorrect size validation check, the system may...

7.8CVSS5.4AI score0.00161EPSS
SaveExploits0References116
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.45 views

PT-2026-31850

Name of the Vulnerable Software and Affected Versions Customer Reviews for WooCommerce plugin for WordPress versions up to and including 5.103.0 Description The Customer Reviews for WooCommerce plugin for WordPress is susceptible to authentication bypass. This occurs because the create review...

5.3CVSS5.7AI score0.00673EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/01/20 12:0 a.m.45 views

PT-2026-3628

Name of the Vulnerable Software and Affected Versions tinyMQTT versions prior to commit 6226ade15bd4f97be2d196352e64dd10937c1962 Description A memory leak exists because the broker does not validate or reject malformed UTF-8 strings in topic filters. An attacker can exploit this by sending repeat...

7.5CVSS5.4AI score0.00292EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.45 views

PT-2026-2467

Name of the Vulnerable Software and Affected Versions Fortinet FortiFone versions 7.0.0 through 7.0.1 Fortinet FortiFone versions 3.0.13 through 3.0.23 Description An exposure of sensitive information to an unauthorized actor allows an unauthenticated attacker to obtain the device configuration v...

10CVSS6.5AI score0.00805EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/01/09 12:0 a.m.45 views

PT-2026-1842

Name of the Vulnerable Software and Affected Versions Network Device Firmware affected versions not specified Description This issue enables authenticated attackers to execute commands through the NTP-configuration of the device. The vulnerability involves a command injection within the NTP...

8.6CVSS7.4AI score0.00325EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.45 views

PT-2025-32635 · Nssm.Exe · Nssm.Exe

Name of the Vulnerable Software and Affected Versions: nssm.exe affected versions not specified Description: A local attacker with limited privileges can exploit improper permissions on nssm.exe to escalate privileges and gain administrative access. Recommendations: At the moment, there is no...

7.8CVSS7.2AI score0.0013EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/10/04 12:0 a.m.45 views

PT-2024-32465 · Unknown · Parse Server

Name of the Vulnerable Software and Affected Versions: Parse Server versions prior to 6.5.9 Parse Server versions prior to 7.3.0 Description: The issue arises when the Parse Server option allowCustomObjectId: true is set, allowing an attacker to create a new user with a custom object ID that...

8.6CVSS7.3AI score0.00416EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
added 2024/04/19 12:0 a.m.45 views

PT-2024-5074

Name of the Vulnerable Software and Affected Versions: Arm Ltd Bifrost GPU Kernel Driver versions r45p0 through r48p0 Arm Ltd Valhall GPU Kernel Driver versions r45p0 through r48p0 Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver versions r45p0 through r48p0 Description: The issue is related to...

5.9CVSS6.5AI score0.00212EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2023/12/12 12:0 a.m.45 views

PT-2023-7781 · Siemens · Scalance M826-2 Shdsl-Router +11

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RM1224 LTE4G EU versions prior to V8.0 RUGGEDCOM RM1224 LTE4G NAM versions prior to V8.0 SCALANCE M804PB versions prior to V8.0 SCALANCE M812-1 ADSL-Router versions prior to V8.0 SCALANCE M816-1 ADSL-Router versions prior to V8.0...

8.3CVSS7.7AI score0.00644EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2023/10/13 12:0 a.m.45 views

PT-2023-20534 · Node-Qpdf · Node-Qpdf

Name of the Vulnerable Software and Affected Versions: node-qpdf versions all Description: The issue arises from the encrypt method failing to sanitize its parameter input, which later flows into a sensitive command execution API. This allows attackers to inject malicious commands once they can...

9.8CVSS9.7AI score0.02079EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2023/04/12 12:0 a.m.45 views

PT-2024-40: Readout protection level bypass in GigaDevice Semiconductor products

The vulnerability was identified in in series GD32E23x, GD32F20x, GD32F1x0, GD32F4xx, GD32F30x, GD32C10x, GD32E10x, GD32E50x of GigaDevice Semiconductor products. The vulnerability can be exploited by an attacker to run arbitrary shell code in SRAM. Vulnerability status: Confirmed by research Dat...

7.6CVSS7.3AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/11/18 12:0 a.m.45 views

PT-2022-26118

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow versions 2.10.1 and earlier TensorFlow versions 2.9.3 and earlier Description TensorFlow is an open source platform for machine learning. The tf.keras.losses.poisson function receives a y pred and y...

7.5CVSS7.1AI score0.0044EPSS
SaveExploits1References18
Positive Technologies
Positive Technologies
added 2021/12/14 12:0 a.m.45 views

PT-2021-24346 · Openzeppelin · Openzeppelin Contracts

Name of the Vulnerable Software and Affected Versions: OpenZeppelin Contracts versions 3.2.0 through 4.4.0 Description: The issue concerns initializer functions that are invoked separate from contract creation, such as minimal proxies, which may be reentered if they make an untrusted non-view...

5.6CVSS5.5AI score0.00515EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2019/06/13 12:0 a.m.45 views

PT-2019-2567 · Abb · Abb Idal Ftp Server

Name of the Vulnerable Software and Affected Versions: ABB IDAL HTTP server affected versions not specified Description: The issue is related to the mishandling of format strings in a username or cookie during the authentication process. Attempting to authenticate with the username %25s%25p%25x%2...

8.8CVSS8.8AI score0.03713EPSS
SaveExploits2References10
Positive Technologies
Positive Technologies
added 2026/07/23 12:0 a.m.44 views

PT-2026-63956

Name of the Vulnerable Software and Affected Versions JetBrains GoLand versions prior to 2026.2 Description Arbitrary code execution is possible within the Go Modules integration before the user grants project trust. Recommendations Update JetBrains GoLand to version 2026.2...

7.8CVSS6.3AI score0.00143EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/15 12:0 a.m.44 views

PT-2026-60178

Name of the Vulnerable Software and Affected Versions NGINX Open Source versions 0.9.6 through 1.30.3 NGINX Open Source version 1.31.2 NGINX Plus versions R33 through R36 NGINX Plus versions 37.0.0.1 through 37.0.2.1 Description A heap buffer overflow exists in the NGINX worker process when a map...

9.2CVSS8.5AI score0.03506EPSS
SaveExploits5References97
Positive Technologies
Positive Technologies
added 2026/07/15 12:0 a.m.44 views

PT-2026-60175

Linux Mint 23 fully supports Wayland and has fixed a serious security vulnerability in mintupdate CVE-2026-59159. Users are advised to update their systems as soon as possible to ensure their security. https://t.co/p55m3tpDPq...

6.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.44 views

PT-2026-58865

An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite NCS, Manage Control Plan MCP, and Blue Planet products. The issue is caused by improper handling of HTTP request paths and headers, which allows an unauthenticated attacker to manipulate...

6.1AI score0.00452EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.44 views

PT-2026-58525

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network...

5.4CVSS6AI score0.00412EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/13 12:0 a.m.44 views

PT-2026-60014

A vulnerability was identified in ByteDance verl up to 0.7.1. Affected is the function math equal of the file prime math/grader.py. The manipulation leads to a sandbox issue. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to ...

6.3CVSS5.5AI score0.00333EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/07/13 12:0 a.m.44 views

PT-2026-60021

Summary A Server Side Request Forgery SSRF vulnerability in download bytes from url allows any actor who can control batch input JSON to make the vLLM batch runner issue arbitrary HTTP/HTTPS requests from the server, without any URL validation or domain restrictions. This can be used to target...

5.4CVSS6.1AI score0.00246EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2026/07/13 12:0 a.m.44 views

PT-2026-59061

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.22.1. This affects the function create template of the file astrbot/dashboard/routes/t2i.py of the component Dashboard API. The manipulation results in improper neutralization of special elements used in a template engine. The...

5.8CVSS5.8AI score0.00299EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/07/10 12:0 a.m.44 views

PT-2026-57104

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache IoTDB. An attacker can write arbitrary files anywhere the IoTDB process has write permissions with unsafe API. This issue affects Apache IoTDB: from 1.0.0 before 2.0.10. Users are recommended to...

6.2AI score0.00411EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/07 12:0 a.m.44 views

PT-2026-56278

Name of the Vulnerable Software and Affected Versions Trueview Security camera T18161- AF version 4.9.60.0 Description An authentication bypass exists due to improper password validation and the inclusion of hard-coded credentials within the firmware. Recommendations At the moment, there is no...

9.8CVSS6.1AI score0.00374EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.44 views

PT-2026-55899

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description An injection and Server-Side Request Forgery SSRF issue exists in the Apache Camel Solr component. T...

9.1CVSS6.1AI score0.0037EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2026/07/03 12:0 a.m.44 views

PT-2026-55504

Name of the Vulnerable Software and Affected Versions Apache Lucene.Net.Replicator versions 4.8.0-beta00005 through 4.8.0-beta00017 Description A path traversal issue exists in the Lucene.Net.Replicator library due to improper input validation and sanitization of filesystem paths. This allows...

8.9CVSS5.9AI score0.00605EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/07/02 12:0 a.m.44 views

PT-2026-55256

Name of the Vulnerable Software and Affected Versions obs tar scm source service versions prior to 0.12.4 Description A shellcode injection exists in the mercurial handler of the source service. Attackers who can provide a crafted service file can execute arbitrary code as the source service or t...

10CVSS6.2AI score0.00375EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/02 12:0 a.m.44 views

PT-2026-55321

Name of the Vulnerable Software and Affected Versions Microsoft Entra Provisioning Service SyncFabric affected versions not specified Description Server-side request forgery SSRF in the Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a...

9.9CVSS5.9AI score0.00653EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2026/07/01 12:0 a.m.44 views

PT-2026-54491

The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'metakaliforms field components' parameter in all versions up to, and including, 2.4.13 due to insufficient input sanitization and output escaping. This makes it possibl...

6.4CVSS5.9AI score0.00234EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/07/01 12:0 a.m.44 views

PT-2026-54519

Name of the Vulnerable Software and Affected Versions buffa affected versions not specified Description The buffa protobuf decoder contains a memory-amplification issue. A malformed message can cause the library to consume up to 22 times the expected amount of RAM, leading to a denial of service...

6.3CVSS5.7AI score0.00423EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/01 12:0 a.m.44 views

PT-2026-55105

Summary A memory-safety vulnerability in Open Babel's MOPAC output parser allowed an out-of-bounds write into the translationVectors array when reading the "FINAL POINT" block of a crafted input file. Details The MOPAC output reader stored translation vectors from the FINAL POINT block into a...

9.8CVSS7.1AI score0.0085EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/07/01 12:0 a.m.44 views

PT-2026-54518

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SkyBridge MB-A100/MB-A110. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product with an administrative privilege...

8.6CVSS7.1AI score0.01367EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/25 12:0 a.m.44 views

PT-2026-52276

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A livelock occurs in the tmigr handle remote up function. The tmigr handle remote cpu function incorrectly skips timer expire remote when the CPU matches smp processor id, assuming local...

7.5CVSS6AI score0.0034EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
added 2026/06/25 12:0 a.m.44 views

PT-2026-52627

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.31 Description Cacti is an open source performance and fault management framework. A path traversal issue allows for arbitrary file read through the Report format file parameter. The process occurs in two stages:...

6.5CVSS5.9AI score0.00386EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2026/06/22 12:0 a.m.44 views

PT-2026-51416

Name of the Vulnerable Software and Affected Versions Nuxt versions 3.x prior to 3.21.7 Nuxt versions 4.0.0 through 4.4.6 Description The reloadNuxtApp function accepts protocol-relative paths, such as //evil.com. These paths bypass the script-protocol check and resolve to a cross-origin URL base...

6.1CVSS5.8AI score0.00337EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/06/20 12:0 a.m.44 views

PT-2026-51175

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.0 Description An authorization bypass exists in the Meet plugin's 'uploadRecordedVideo.json.php' endpoint. The system derives the target users id from the uploaded filename without proper verification. An attacker w...

9.2CVSS6AI score0.00453EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/06/19 12:0 a.m.44 views

PT-2026-50874

Name of the Vulnerable Software and Affected Versions JetBrains GoLand versions prior to 2026.1.3 Description Remote code execution is possible through the use of untrusted project configuration. Recommendations Update JetBrains GoLand to version 2026.1.3 or later...

8.8CVSS6.3AI score0.00288EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/19 12:0 a.m.44 views

PT-2026-50896

Name of the Vulnerable Software and Affected Versions Apache APISIX versions 3.5.0 through 3.16.0 Description An authentication bypass issue exists in the opa plugin. An attacker can relay spoofed identity headers to upstream services by exploiting non-default configurations in the opa plugin,...

5.4CVSS5.9AI score0.00359EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/06/19 12:0 a.m.44 views

PT-2026-50828

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELSEC iQ-F Series FX5-EIP EtherNet/IP module versions 1.000 and prior Description An integer overflow or wraparound in the EtherNet/IP function allows a remote attacker to cause a denial-of-service DoS condition. By rapidl...

8.7CVSS6AI score0.00637EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/06/19 12:0 a.m.44 views

PT-2026-51035

Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00514EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/18 12:0 a.m.44 views

PT-2026-50712

Name of the Vulnerable Software and Affected Versions Webmin affected versions not specified Description Unauthenticated attackers can read the contents of any file ending in .conf within module directories. This is caused by a bypassable regex pattern, which is a sequence of characters used to...

6.9CVSS5.8AI score0.00476EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/06/18 12:0 a.m.44 views

PT-2026-50804

Name of the Vulnerable Software and Affected Versions Chef 360 versions prior to 1.7.0 Description A static credential embedded in the software allows unauthenticated access to internal message queues. These queue messages contain tenant-specific identifiers. Recommendations Update to version 1.7...

5.1CVSS5.9AI score0.00271EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/18 12:0 a.m.44 views

PT-2026-50705

Name of the Vulnerable Software and Affected Versions U.S. GAO Electronic Protest Docketing System EPDS affected versions not specified U.S. CBCA Electronic Docketing System EDS affected versions not specified Description The U.S. Government Accountability Office GAO Electronic Protest Docketing...

6.9CVSS5.9AI score0.00505EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/06/17 12:0 a.m.44 views

PT-2026-50312

Subscriber Broken Access Control in Bricks Builder = 2.1.4 versions...

4.3CVSS5.2AI score0.00243EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/17 12:0 a.m.44 views

PT-2026-50463

Name of the Vulnerable Software and Affected Versions Dell PowerFlex Manager affected versions not specified Description An improper neutralization of special elements used in an SQL command, known as SQL Injection, allows a low privileged attacker with adjacent network access to potentially caus...

5.7CVSS5.8AI score0.00192EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/17 12:0 a.m.44 views

PT-2026-50369

Missing Authorization vulnerability in Avirtum iPages Flipbook allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects iPages Flipbook: from n/a through 1.5.1...

5.3CVSS5.2AI score0.00249EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/16 12:0 a.m.44 views

PT-2026-49958

Name of the Vulnerable Software and Affected Versions MySQL Shell Shell for VS Code version 2026.2.0+9.6.1 Description An issue in the Shell for VS Code component of MySQL Shell allows a low-privileged attacker with network access via HTTP to compromise the software. Successful exploitation can...

9.9CVSS5.8AI score0.00521EPSS
SaveExploits0References4
Total number of security vulnerabilities5000