Lucene search
+L
PtsecurityMost viewed

200724 matches found

Positive Technologies
Positive Technologies
•added 2025/09/15 12:00 a.m.•35 views

PT-2026-43418

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7 macOS Sonoma versions prior to 14.8 macOS Tahoe versions prior to 26 Description A logic issue involving insufficient validation may allow a malicious application to access sensitive user data...

5.5CVSS5.8AI score0.00139EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/08/19 12:00 a.m.•35 views

PT-2025-33741 · Scada-Lts · Scada-Lts

Name of the Vulnerable Software and Affected Versions: Scada-LTS version 2.7.8.1 Description: A security flaw exists in Scada-LTS 2.7.8.1 related to the mailing lists.shtm file. Manipulation of the name/userList/address argument can lead to cross-site scripting. This issue is potentially...

5.1CVSS6.5AI score0.00354EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/08/05 12:00 a.m.•35 views

PT-2025-31980 · Netwin · Surgeftp

Name of the Vulnerable Software and Affected Versions: Netwin SurgeFTP versions 23c8 and earlier Description: Netwin SurgeFTP contains a flaw in its web-based administrative console that allows authenticated users to execute arbitrary system commands via crafted POST requests to the surgeftpmgr.c...

8.6CVSS7.8AI score0.00977EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/05/02 12:00 a.m.•35 views

PT-2025-18826 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been identified where the packet length retrieved from a descriptor may be larger than the actual socket buffer length. This can cause the cloned socket...

8.8CVSS7.7AI score0.01328EPSS
SaveExploits3References653
Positive Technologies
Positive Technologies
•added 2025/05/02 12:00 a.m.•35 views

PT-2025-18895 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns a server shutdown leak in the SUNRPC component of the Linux kernel. It involves a race condition where kthread stop may prevent threadfn from being called, resulting...

8.8CVSS5AI score0.01328EPSS
SaveExploits3References652
Positive Technologies
Positive Technologies
•added 2025/04/22 12:00 a.m.•35 views

PT-2025-17562 · Unknown · Hospital Management System +1

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4.0 Description: The issue is related to an arbitrary file upload vulnerability in the /jquery-file-upload/server/php/index.php component. This allows an unauthenticated attacker to upload any file to the...

9.8CVSS7.1AI score0.0114EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/03/25 12:00 a.m.•35 views

PT-2025-12828

Name of the Vulnerable Software and Affected Versions NASA cFS Core Flight System Aquila affected versions not specified Description The issue concerns a segmentation fault that can occur in the Memory Management Module of NASA cFS Core Flight System Aquila when a malicious telecommand is sent...

7.5CVSS5.8AI score0.00477EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/03/12 12:00 a.m.•35 views

PT-2025-11089 · Unknown · Softether Vpn

Name of the Vulnerable Software and Affected Versions: SoftEther VPN version 5.02.5187 Description: The issue is related to a Buffer Overflow in the Command.c file, specifically via the PtMakeCert and PtMakeCert2048 functions. Recommendations: For SoftEther VPN version 5.02.5187, consider disabli...

9.8CVSS6.2AI score0.00607EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/02/10 12:00 a.m.•35 views

PT-2025-6215 · Coinbase · Coinbase Wallet Sdk

Name of the Vulnerable Software and Affected Versions: Coinbase Wallet SDK versions prior to 4.3.0 Description: There is a security issue in outdated versions of the software. This issue does not directly affect users' keys, smart contracts, or funds. Recommendations: Update to version 4.3.0 or...

7.2AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•35 views

PT-2025-1838 · Woomotiv · Live Sales Notification For Woocommerce – Woomotiv

Name of the Vulnerable Software and Affected Versions: Live Sales Notification for Woocommerce – Woomotiv plugin for WordPress versions up to, and including, 3.6.1 Description: The issue is related to SQL Injection via the woomotiv seen products . cookie due to insufficient escaping on the...

7.5CVSS8AI score0.00462EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/01/03 12:00 a.m.•35 views

PT-2025-3123 · Codeastro · Codeastro Complaint Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Complaint Management System version 1.0 Description: The issue allows a remote attacker to escalate privileges via the delete e.php component. Recommendations: For CodeAstro Complaint Management System version 1.0, consider disablin...

9.8CVSS6.5AI score0.0061EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2024/11/24 12:00 a.m.•35 views

PT-2024-17176 · Unknown · Cph2 Echarge Firmware

Name of the Vulnerable Software and Affected Versions: cph2 echarge firmware versions through 2.0.4 Description: The issue affects devices that communicate with the eCharge cloud infrastructure over an insecure channel, as peer verification is disabled. This allows remote unauthenticated users,...

9.8CVSS8.6AI score0.00417EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2024/11/18 12:00 a.m.•35 views

PT-2024-8605 · Nvidia · Nvidia Base Command Manager

Name of the Vulnerable Software and Affected Versions: NVIDIA Base Command Manager affected versions not specified Description: The issue is related to a missing authentication vulnerability in the CMDaemon component. A successful exploit of this vulnerability might lead to code execution, denial...

9.8CVSS9.8AI score0.00879EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2024/10/21 12:00 a.m.•35 views

PT-2024-28778 · Unknown · Boa Web Server +1

Name of the Vulnerable Software and Affected Versions: Vilo 5 Mesh WiFi System versions 5.16.1.33 and earlier Description: The issue is related to an information leak in the Boa webserver, which allows remote, unauthenticated attackers to leak memory addresses of uClibc and the stack. This can be...

4.3CVSS6.9AI score0.00258EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2024/05/20 12:00 a.m.•35 views

PT-2024-40259 · Passbolt · Passbolt

Name of the Vulnerable Software and Affected Versions: Passbolt affected versions not specified Description: The issue concerns the /auth/verify.json endpoint, which returns a JSON containing the cookies sent in the request. This could allow an attacker who exploits an XSS vulnerability to retrie...

3.7CVSS5.9AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/05/14 12:00 a.m.•35 views

PT-2024-30780

Name of the Vulnerable Software and Affected Versions Jetpack – WP Security, Backup, Speed, & Growth plugin for WordPress versions up to, and including, 13.3.1 Description The issue is related to Stored Cross-Site Scripting via the plugin's wpvideo shortcode due to insufficient input sanitization...

6.4CVSS5.6AI score0.00372EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/04/05 12:00 a.m.•35 views

PT-2024-21904 · Maildev · Maildev

Name of the Vulnerable Software and Affected Versions: MailDev versions 2 through 2.1.0 Description: The issue allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading to lib/mailserver.js writing arbitrary code into the routes.js file. Recommendations: For...

9.8CVSS7.7AI score0.00904EPSS
SaveExploits2References14
Positive Technologies
Positive Technologies
•added 2024/03/14 12:00 a.m.•35 views

PT-2024-2144 · Mitsubishi · Melsec-L Series +1

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules affected versions not specified Description: The issue is related to an Incorrect Pointer Scaling vulnerability in the CPU modules of Mitsubishi Electric...

9.8CVSS7.5AI score0.01066EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2024/01/05 12:00 a.m.•35 views

PT-2024-10781 · Irfanview · Irfanview B3D Plugins

Name of the Vulnerable Software and Affected Versions: IrfanView B3D PlugIns versions prior to 4.56 Description: The issue is related to a heap-based out-of-bounds write in the B3d.dll module. This occurs at the B3d.dll!+27ef location, indicating a specific point of vulnerability in the code. The...

9.8CVSS9.3AI score0.00562EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2023/08/08 12:00 a.m.•35 views

PT-2023-21824 · Qualcomm · Sd205 Firmware +58

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises from the cam get device priv function not checking the type of handle being returned, which can be a device, session, or link handle...

7.8CVSS7.6AI score0.00122EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/04/20 12:00 a.m.•35 views

PT-2023-13500 · Libslic3R +1 · Libslic3R +1

Name of the Vulnerable Software and Affected Versions: libslic3r version 1.3.0 libslic3r Master Commit b1a5500 Description: A heap-based buffer overflow issue exists in the TriangleMesh clone functionality. This can be triggered by a specially-crafted STL file, leading to a heap buffer overflow. ...

8.1CVSS7.8AI score0.00617EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2022/11/11 12:00 a.m.•35 views

PT-2022-17911 · Intel · Intel Xmm 7560 Modem

Name of the Vulnerable Software and Affected Versions: IntelR XMMTM 7560 Modem software versions prior to M2 7560 R 01.2146.00 Description: The issue is related to an out-of-bounds write in the IntelR XMMTM 7560 Modem software, which may allow an unauthenticated user to potentially enable...

9.6CVSS9.4AI score0.00276EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/09/08 12:00 a.m.•35 views

PT-2022-24316 · Unknown · Interview Management System

Name of the Vulnerable Software and Affected Versions: Interview Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/interview/editQuestion.php" API endpoint. Recommendations: For...

7.2CVSS7.2AI score0.0086EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/02/25 12:00 a.m.•35 views

PT-2022-10654

Name of the Vulnerable Software and Affected Versions jQuery-Upload-File version 4.0.11 Description A cross-site scripting XSS issue exists due to a vulnerability in the fileNameStr parameter, allowing attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload...

6.1CVSS6.6AI score0.00859EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2022/01/25 12:00 a.m.•35 views

PT-2022-1608 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.5 Description: An issue was discovered in the Linux kernel, which is related to a memory leak in the yam siocdevprivate function in drivers/net/hamradio/yam.c. This issue can be exploited to cause a denial ...

9.8CVSS7.3AI score0.88606EPSS
SaveExploits297References1215
Positive Technologies
Positive Technologies
•added 2021/11/15 12:00 a.m.•35 views

PT-2021-6982 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.28 and prior Description: The issue is related to insufficient input validation in the Server: Optimizer component of MySQL Server. It allows a high-privileged attacker with network access via multiple protocols to...

10CVSS6.8AI score0.87816EPSS
SaveExploits22References822
Positive Technologies
Positive Technologies
•added 2021/08/26 12:00 a.m.•35 views

PT-2021-7066 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw in the processing of received ICMP errors, specifically ICMP fragment needed and ICMP redirect, allows an off-path remote user to quickly scan open UDP ports and bypass the sour...

9.8CVSS7.8AI score0.92621EPSS
SaveExploits350References1704
Positive Technologies
Positive Technologies
•added 2021/05/19 12:00 a.m.•35 views

PT-2021-6126 · Gcc +6 · Gcc +6

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.16.10 Description: The issue is related to a buffer overflow in the Linux kernel, which can be exploited by a remote attacker to execute arbitrary code. Certain binary files built around 2003, for example with...

9.8CVSS8.1AI score0.67994EPSS
SaveExploits200References1116
Positive Technologies
Positive Technologies
•added 2021/02/21 12:00 a.m.•35 views

PT-2021-7676 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.10.161 Description: A vulnerability in the io uring subsystem can leak kernel memory information to the user process. The timens install function calls current is single threaded to determine if the current...

9.8CVSS6.2AI score0.88606EPSS
SaveExploits223References738
Positive Technologies
Positive Technologies
•added 2021/01/22 12:00 a.m.•35 views

PT-2021-7753 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability was found in the fs/inode.c:inode init owner function logic of the Linux kernel. This issue allows local users to create files for the XFS file-system with unintended...

9.8CVSS7.2AI score0.88606EPSS
SaveExploits263References1575
Positive Technologies
Positive Technologies
•added 2019/06/10 12:00 a.m.•35 views

PT-2019-3113 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.1.8 Description: The issue is related to a double-free error caused by a malicious USB device in the drivers/usb/misc/rio500.c driver. This error can lead to a denial of service. Recommendations: For Linux...

10CVSS7.4AI score0.98745EPSS
SaveExploits175References1732
Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•34 views

PT-2026-67687

Name of the Vulnerable Software and Affected Versions Samsung Open Source rlottie affected versions not specified Description Improper input validation allows the processing of oversized serialized data payloads. Recommendations At the moment, there is no information about a newer version that...

6.5CVSS5.1AI score0.00271EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/03 12:00 a.m.•34 views

PT-2026-67502

A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to execute arbitrary operating system commands on the agent's host via a crafted prompt that sets the non interactive parameter to true, bypassing the human consent gate. To...

8.8CVSS6AI score0.00322EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•34 views

PT-2026-66436

Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system shutdown. This creates a temporary window in which internal services may become externally accessible, potentially allowing an unauthenticated remote attacker to connect to these...

9.8CVSS6.1AI score0.00462EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•34 views

PT-2026-66489

When Calico's shared debug server is enabled disabled by default, the Calico kube-controllers and Goldmane components bind their Go pprof debug listener to 0.0.0.0 without authentication. Any pod with network reachability to the listener can retrieve the process heap, goroutine stacks including...

6CVSS5.9AI score0.00343EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•34 views

PT-2026-66545

Name of the Vulnerable Software and Affected Versions Leantime version 3.6.2 Description An issue exists where the Laravel VerifyCsrfToken middleware is excluded from the global middleware stack in app/Http/Kernel.php. This allows unauthenticated attackers to perform state-changing actions on...

8.8CVSS5.7AI score0.00162EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/07/26 12:00 a.m.•34 views

PT-2026-64787

Name of the Vulnerable Software and Affected Versions NousResearch hermes-agent version 2026.6.5 Description Improper access controls exist within the SimpleX Gateway Authorization component, specifically in the file hermes-agent/plugins/platforms/simplex/adapter.py. A remote attacker can exploit...

5CVSS6AI score0.0023EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•34 views

PT-2026-63964

In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking...

4.3CVSS5.3AI score0.00149EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•34 views

PT-2026-64192

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.186 Description A use-after-free issue exists in WebMCP, which occurs when an application continues to use a pointer after it has been freed, potentially leading to memory corruption. This flaw allows...

8.8CVSS6.3AI score0.00398EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
•added 2026/07/22 12:00 a.m.•34 views

PT-2026-63368

Open Mercato does not validate regex rules. An attacker with privileges to create the regex rule can add an unsafe regex to a field. When someone provide the proper string it can result in a DoS attack. This issue was fixed in version 0.6.4...

6.9CVSS5.3AI score0.00278EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•34 views

PT-2026-62420

Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attacker-controlled code in memory and modify or extract firmware and other sensitive data...

8.6CVSS5.3AI score0.00276EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/07/19 12:00 a.m.•34 views

PT-2026-61298

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack overflow occurs in the Linux kernel due to a recursion bypass in the tcf mirred act function. The function uses a counter sched mirred nest to limit recursion depth, but when the...

5.4AI score0.00188EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/19 12:00 a.m.•34 views

PT-2026-61454

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the SMB client where the CIFS GENL CMD SWN NOTIFY userspace witness-notify command lacks a capability flag. This allows any local process to send RESOURCE CHANGE or CLIE...

7.8CVSS5.3AI score0.00129EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/18 12:00 a.m.•34 views

PT-2026-60994

A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This issue affects the function dispatchIncoming of the file pkg/channels/wecom/wecom.go of the component Group Message Handler. The manipulation results in incorrect authorization. It is possible to launch the attack remotely. T...

6.5CVSS5.1AI score0.00209EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/18 12:00 a.m.•34 views

PT-2026-60964

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 9.0.0 through 9.1.13 Apache Traffic Server versions 10.0.0 through 10.1.2 Description Uncontrolled Resource Consumption issue in Apache Traffic Server. Recommendations Upgrade versions 9.0.0 through 9.1.13 to...

7.5CVSS5.2AI score0.00734EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/07/17 12:00 a.m.•34 views

PT-2026-60810

Name of the Vulnerable Software and Affected Versions Sangoma Switchvox SMB Edition version 8.3 104997 Description An unauthenticated SQL injection exists where the '/pa' endpoint processes XML content starting with . The system directly concatenates the user-controlled PhoneIP value into...

9.3CVSS6.4AI score0.00411EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/16 12:00 a.m.•34 views

PT-2026-60563

bunkerweb is an Open-source and next-generation Web Application Firewall WAF. Prior to BunkerWeb 1.6.12 and BunkerWeb PRO 0.57, authenticated Host header handling in the BunkerWeb UI and API improperly validated and neutralized user-controlled input in a configuration-dependent path, allowing a...

6.1CVSS6.1AI score0.00237EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/16 12:00 a.m.•34 views

PT-2026-19

Name of the Vulnerable Software and Affected Versions ViPNet Client ViPNet MFTP component, versions prior to 4.5.5 build 24733 Description Vulnerability in ViPNet Client component ViPNet MFTP. Recommendations Disable ViPNet on each host APM/server or update ViPNet Client 4 to version 4.5.5 buiild...

9CVSS6.1AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/16 12:00 a.m.•34 views

PT-2026-60471

HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. A remote attacker can intercept and alter the contents of the server's HTTP responses before they reach the client application, allowing them to manipulate the authentication or authorization logic to...

5.5CVSS6.1AI score0.00187EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/15 12:00 a.m.•34 views

PT-2026-60158

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-26 ImageMagick versions prior to 6.9.13-51 Description A memory leak exists in the YUV decoder, which is a component that processes YUV color space images. This issue occurs when the opening of a blob fails...

9.1CVSS5.2AI score0.00323EPSS
SaveExploits0References67
Total number of security vulnerabilities5000