Lucene search
+L
PtsecurityRecent

201417 matches found

Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•12 views

PT-2026-66122

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Save to Drive feature allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape...

9.6CVSS5.6AI score0.00442EPSS
SaveExploits0References377
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•20 views

PT-2026-66391

The Sync Post With Other Site WordPress plugin before 1.9.3 does not correctly enforce the page-editing capability on a REST route that creates and updates posts, because of an operator-precedence flaw in its authorization check. An authenticated user holding only the post-editing capability such...

5.9AI score0.00259EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•23 views

PT-2026-66437

Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command into the system configuration which is subsequently executed as root...

9.8CVSS5.9AI score0.00419EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•16 views

PT-2026-66479

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console...

5.4CVSS5.8AI score0.00166EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•15 views

PT-2026-66349

A format string vulnerability was found in the Internal Backup on the ADM. The vulnerability occurs because user-controlled task input may be included in an error response and processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory...

7.1CVSS5.8AI score0.00265EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•17 views

PT-2026-66392

The Bit Form WordPress plugin before 3.1.2 does not enforce a form's active/published status on its public form-submission handlers, allowing unauthenticated users to submit entries to, and fire the configured workflows such as email notifications of forms the site owner has deactivated or...

5.8AI score0.00201EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•23 views

PT-2026-66447

The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks...

5.9CVSS5.9AI score0.00318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•23 views

PT-2026-66399

The RegistrationMagic WordPress plugin before 6.0.9.4 does not perform authorization, ownership or nonce checks on a front-end submission-editing action, allowing unauthenticated attackers to overwrite other users' form submissions and the profile fields of the associated non-administrator...

5.9AI score0.0019EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•16 views

PT-2026-66360

A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...

7.1CVSS5.8AI score0.00302EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•16 views

PT-2026-66487

Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise versions 13.0.1.0 through 13.0.7.2 IBM App Connect Enterprise versions 12.0.1.0 through 12.0.12.27 Description A remote attacker can perform directory traversal on the system. By sending a specially crafted URL reque...

9.8CVSS5.7AI score0.00734EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•15 views

PT-2026-66459

Name of the Vulnerable Software and Affected Versions koku-metrics-operator affected versions not specified Description A flaw in the CostManagementMetricsConfig custom resource allows a user with edit permissions to specify an arbitrary upload URL. When the authentication.type is set to token th...

7.6CVSS5.6AI score0.00229EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•15 views

PT-2026-66063

Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•13 views

PT-2026-66087

Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•15 views

PT-2026-66060

Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•12 views

PT-2026-66090

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•13 views

PT-2026-66077

Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS6.2AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•14 views

PT-2026-66081

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•12 views

PT-2026-66016

Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•13 views

PT-2026-66049

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Side-channel information leakage in the Autofill feature allows a remote attacker to leak cross-origin data. This occurs when a user is convinced to perform specific UI gestures while...

9.6CVSS5.5AI score0.00442EPSS
SaveExploits0References377
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•21 views

PT-2026-66003

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•16 views

PT-2026-66048

Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•17 views

PT-2026-66002

Inappropriate implementation in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•14 views

PT-2026-66027

Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•12 views

PT-2026-66005

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.8AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•17 views

PT-2026-66025

Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•13 views

PT-2026-66041

Object lifecycle issue in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•16 views

PT-2026-66012

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the FileSystem component allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Recommendations Update Google Chro...

9.6CVSS5.6AI score0.00442EPSS
SaveExploits0References377
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•15 views

PT-2026-66001

Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS6AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•12 views

PT-2026-66031

Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

9.6CVSS6.3AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•15 views

PT-2026-65991

Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•13 views

PT-2026-65983

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Loader component allows a remote attacker who has already compromised the renderer process to leak cross-origin data through a speciall...

9.6CVSS5.6AI score0.00442EPSS
SaveExploits0References377
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•18 views

PT-2026-65980

Use after free in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

9.6CVSS6.3AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•17 views

PT-2026-65978

Inappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.8AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•21 views

PT-2026-65989

Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•12 views

PT-2026-65997

Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•19 views

PT-2026-65976

Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•15 views

PT-2026-65999

Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS6.2AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•11 views

PT-2026-65971

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A use after free issue exists in Views. This allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a specially craft...

9.6CVSS5.6AI score0.00442EPSS
SaveExploits0References377
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•16 views

PT-2026-65981

Insufficient policy enforcement in Prefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•17 views

PT-2026-65993

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in HTML allows a remote attacker to bypass the content security policy CSP, which is a security layer used to detect and mitigate certain types of attack...

9.6CVSS5.4AI score0.00442EPSS
SaveExploits0References377
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•18 views

PT-2026-66174

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 151.0.7922.72 Description A race condition in DevTools allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape. This is achieved by using a crafte...

9.6CVSS5.6AI score0.00442EPSS
SaveExploits0References377
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•15 views

PT-2026-66162

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•17 views

PT-2026-66198

Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•17 views

PT-2026-66152

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•17 views

PT-2026-66196

Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via malicious network traffic. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•14 views

PT-2026-66172

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in DevTools allows a remote attacker who has compromised the renderer process to inject scripts or HTML into a privileged page by using a crafted HTML...

9.6CVSS5.6AI score0.00442EPSS
SaveExploits0References377
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•19 views

PT-2026-66190

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•13 views

PT-2026-66195

Inappropriate implementation in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•18 views

PT-2026-66179

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the mobile version of the browser allows a local attacker to spoof the contents of the Omnibox the URL address bar by using a...

9.6CVSS5.5AI score0.00442EPSS
SaveExploits0References377
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•18 views

PT-2026-66150

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Passwords component allows a remote attacker who has compromised the renderer process to perform UI spoofing through a crafted HTML pag...

9.6CVSS5.6AI score0.00442EPSS
SaveExploits0References377
Total number of security vulnerabilities201417