Lucene search
+L
PtsecurityRecent

200088 matches found

Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.2 views

PT-2026-70339

Untrusted search path for some IntelR Performance Counter Monitor IntelR PCM before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

5.4CVSS5.1AI score0.00116EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.4 views

PT-2026-71889

CVE-2021-47995 - Rejected reason: This CVE ID has been rejected. CVE ID :CVE-2021-47995 Published : Aug. 11, 2026, 3:17 p.m. | 14 minutes ago Description :Rejected reason: This CVE ID has been rejected. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products,...

5.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.4 views

PT-2026-70198

Craft CMS before 5.10.5 fails to persist updated credential counters after WebAuthn assertion validation in the passkey login endpoint. Attackers can replay captured login request bodies containing requestOptions and response to create additional authenticated sessions for victim accounts...

7.1CVSS5.3AI score0.00227EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70417

Name of the Vulnerable Software and Affected Versions Microsoft Remote Registry Service affected versions not specified Description A null pointer dereference in the Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network. A null pointer...

6.5CVSS5.2AI score0.01042EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.4 views

PT-2026-70989

OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.5 views

PT-2026-70839

An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause an internal reference to be used after the underlying memory has been freed. This could result in a server crash or, potentially, executi...

7.5CVSS5.5AI score0.00342EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.4 views

PT-2026-70896

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the Xerces SAX2 XMLReader constructed in src/Base/Reader.cpp by Base::XMLReader::XMLReader parses attacker-controlled Document.xml from a crafted .FCStd archive without disabling default external entity...

6.1CVSS5.3AI score0.00125EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.5 views

PT-2026-70912

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...

5.3CVSS5.3AI score0.00341EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.4 views

PT-2026-70362

Name of the Vulnerable Software and Affected Versions Vitis Unified affected versions not specified Description Uncontrolled search paths in the installation path on local Windows machines allow for DLL injection. This occurs when an application searches for a Dynamic Link Library DLL—a shared...

4.6CVSS5.5AI score0.00148EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-71940

CVE-2023-54368 - Rejected reason: This CVE ID has been rejected. CVE ID :CVE-2023-54368 Published : Aug. 11, 2026, 3:17 p.m. | 14 minutes ago Description :Rejected reason: This CVE ID has been rejected. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products,...

5.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.6 views

PT-2026-70854

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations,...

5.4CVSS5.3AI score0.00168EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.5 views

PT-2026-70275

Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...

4.2CVSS5.1AI score0.00102EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70620

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to locally disclose sensitive information, which can impact the system. Recommendations At the moment, there is no information...

5.5CVSS5AI score0.00345EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.4 views

PT-2026-70248

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0846 Description The set sofo function in src/spellfile.c reuses the sl sal first array without resetting values previously set by set sal first. A specially crafted spell file containing an SN SAL section before an S...

8.5CVSS5.4AI score0.00125EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.5 views

PT-2026-70913

Name of the Vulnerable Software and Affected Versions FileRun versions prior to 2026.2.1 Description Authenticated attackers can achieve remote code execution through an OS command injection. The issue occurs when the thumbnail generation system passes filenames wrapped in shell double-quotes...

8.8CVSS6.3AI score0.01671EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.5 views

PT-2026-70640

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to memory...

7.8CVSS8.4AI score0.00303EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70160

AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject malicious JavaScript that persists in the database. When administrators visit the users management page, the unsanitized phone value is rendered via innerHTML, executing the injected...

7.2CVSS5.2AI score0.00259EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70870

A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can inject unencoded data into the Insights API URL path. This occurs because the ClusterID, which is controlled by the spoke, is used directly in the request path without proper validation or URL...

5CVSS5.3AI score0.00281EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.4 views

PT-2026-70077

Name of the Vulnerable Software and Affected Versions ManageEngine M365 Manager Plus versions prior to 4820 ManageEngine M365 Security Plus versions prior to 4820 Description An authenticated path traversal issue exists within the Exchange Online backup module. Path traversal is a flaw that allow...

8.5CVSS5.3AI score0.00991EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.5 views

PT-2026-70523

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Cloud Files Mini Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the...

7.8CVSS5.7AI score0.0024EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.8 views

PT-2026-70476

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Cloud Files Mini Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the...

7.8CVSS5.7AI score0.0195EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70770

Name of the Vulnerable Software and Affected Versions Microsoft PowerShell Core affected versions not specified Description A relative path traversal issue exists that allows an unauthorized attacker to execute code over a network. Path traversal is a flaw that allows an attacker to access files ...

8.8CVSS5.5AI score0.00758EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70057

Name of the Vulnerable Software and Affected Versions Travel Agency Management System affected versions not specified Description An issue exists where unauthenticated remote attackers can perform SQL Injection, a technique used to insert malicious SQL code into a query. This allows the attacker ...

9.8CVSS5.8AI score0.00474EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.5 views

PT-2026-70916

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspace OAuth credentialsId from a readable bot configuration and then overwrite that credential through handleUpdateOAuthCredentials by supplying an attacker-controlled writable...

9.9CVSS5.3AI score0.00255EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.5 views

PT-2026-70175

n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search search files tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the...

4.9CVSS5.4AI score0.00381EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.4 views

PT-2026-70786

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, normalizeStats in node.js, reached unconditionally through getStat and loadStat on every browserslist call, processes untrusted browserslist-stats.json, opts.stats, and...

7.5CVSS5.3AI score0.00361EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.5 views

PT-2026-70246

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserver accept, causing descriptors to overflow fd set structures in src/channel.c and fixed-size struct pollfd arrays in src/os unix.c,...

6.8CVSS5.4AI score0.00111EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.4 views

PT-2026-70308

Improper buffer restrictions for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur...

7.1CVSS5.4AI score0.00172EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.5 views

PT-2026-70695

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description A relative path traversal issue allows an unauthorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no information about a newer versio...

7.8CVSS5.2AI score0.00267EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.5 views

PT-2026-70782

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user...

4CVSS5.3AI score0.00155EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70148

Name of the Vulnerable Software and Affected Versions Intelliants Subrion CMS versions prior to 4.2.2 Description An authenticated administrator can delete arbitrary files on the server through the admin panel file deletion endpoint. This occurs because the endpoint passes a user-supplied file pa...

6.5CVSS5.4AI score0.00325EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-71944

CVE-2023-54372 - Rejected reason: This CVE ID has been rejected. CVE ID :CVE-2023-54372 Published : Aug. 11, 2026, 3:17 p.m. | 14 minutes ago Description :Rejected reason: This CVE ID has been rejected. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products,...

5.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70193

A vulnerability has been identified in Simcenter Femap All versions V2606.0001. The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS5.4AI score0.00113EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.2 views

PT-2026-70299

Protection mechanism failure for some Cluster Management Toolkit for Kubernetes software before version v0.8.5 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of...

5.4CVSS5.2AI score0.0012EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.5 views

PT-2026-70044

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform Admin Tools affected versions not specified Description Insufficient authorization checks in certain administrative functionality allow an authenticated non-administrative user to bypass...

4.3CVSS5.2AI score0.00182EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70403

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A race condition occurs in the Windows Telephony Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileg...

7CVSS5.2AI score0.00189EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.4 views

PT-2026-70406

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description A race condition exists in the Windows Event Logging Service. This occurs when concurrent execution using a shared resource lacks proper synchronization, allowing an...

7CVSS5.4AI score0.00189EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.2 views

PT-2026-70462

Name of the Vulnerable Software and Affected Versions Windows Program Compatibility Assistant Service affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows Program Compatibility Assistant Service. This issue allows an authorized attacker to...

7.8CVSS5.2AI score0.03175EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.6 views

PT-2026-70274

Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur...

4.5CVSS5.1AI score0.00102EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70359

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.36.0, the jwtAuthCheck function in server/auth/TokenManager.js treats JWTs with the refresh token type as bearer access tokens on API and WebSocket resource endpoints such as /api/me instead of restricting them to...

5.3CVSS5.3AI score0.00267EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70112

A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local user by username. The SCIM user inges...

8.8CVSS5.3AI score0.00292EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70234

Any authenticated Velociraptor user — including one holding only the readerrole — can terminate the entire server process with a single request, by calling SetPassword with a username that does not exist...

6.5CVSS5.2AI score0.00289EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.2 views

PT-2026-70400

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A heap-based buffer overflow occurs in Microsoft Office Word, which could allow an unauthorized attacker to execute code locally. A heap-based buffer overflow is a memory...

7.8CVSS6AI score0.00393EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70637

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An integer underflow wrap or wraparound occurs, which allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the system. Integer underfl...

7.8CVSS5.7AI score0.0034EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.5 views

PT-2026-70022

Name of the Vulnerable Software and Affected Versions SAP Data Services Management Console affected versions not specified Description The application allows an overly permissive Content Security Policy CSP configuration and lacks restrictive directives. This weakness could enable an authenticate...

3.7CVSS5.2AI score0.00142EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.5 views

PT-2026-70578

Name of the Vulnerable Software and Affected Versions Microsoft Office Outlook affected versions not specified Description Insufficiently protected credentials allow an unauthorized attacker to perform spoofing over a network. Spoofing is a technique where an attacker masquerades as another perso...

4.3CVSS5.2AI score0.00601EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.4 views

PT-2026-70769

Improper control of generation of code 'code injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

8.8CVSS5.5AI score0.00594EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.2 views

PT-2026-70054

Name of the Vulnerable Software and Affected Versions wildfly-core affected versions not specified Description An authenticated administrative user can inject a malformed payload into the Inet Address field via the Management Model. This action causes the server to crash and enter an unrecoverabl...

4.9CVSS5.1AI score0.00344EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70191

A vulnerability has been identified in Desigo DXR2 All versions V01.21.233.16-7862, Desigo PXC3 All versions V01.21.233.16-7862, Desigo PXC4 All versions V02.21.194.36-2715, Desigo PXC5.E003 All versions V02.21.194.36-2715, Desigo PXC5.E24 All versions V02.21.194.36-2715, Desigo PXC7 All versions...

5.3CVSS5.2AI score0.00163EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:0 a.m.3 views

PT-2026-70432

Name of the Vulnerable Software and Affected Versions Windows DHCP Client affected versions not specified Description A use after free condition exists in the Windows DHCP Client. This allows an authorized attacker to execute arbitrary code locally or a remote attacker to execute arbitrary code a...

7CVSS5.9AI score0.00246EPSS
SaveExploits0References6
Total number of security vulnerabilities200088