Threatscape

All the following vulnerabilities were discovered either by Positive Research experts or by automated security products from Positive Technologies, including MaxPatrol and PT Application Inspector.
High (9,3) CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
PT-2024-22: (Unauth Remote Code Execution) in MyQ Print Server
Fix date: January 22, 2024
Vector: Remote
Systems affected: MyQ Print Server
Vendor: MyQ, spol. s r.o
High (9,2) CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N
PT-2024-21: OS Command Injection in Pandora FMS
Fix date: June 11, 2024
Vector: Remote
Systems affected: Pandora FMS
Vendor: Pandora FMS
High (9,3) CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
PT-2024-20: Unauth Time-Based SQL Injection in Pandora FMS
Fix date: June 11, 2024
Vector: Remote
Systems affected: Pandora FMS
Vendor: Pandora FMS
Medium (6,8) CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
PT-2024-18: Stored Cross-Site Scripting (Stored XSS) in Moodle
Fix date: April 19, 2024
Vector: Remote
Systems affected: Moodle
Vendor: Moodle
Medium (6,8) CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
PT-2024-17: Stored Cross-Site Scripting (Stored XSS) in Moodle
Fix date: April 19, 2024
Vector: Remote
Systems affected: Moodle
Vendor: Moodle
High (8,8) CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
PT-2024-16: OS Command Injection in Pandora FMS
Fix date: March 19, 2024
Vector: Remote
Systems affected: Pandora FMS
Vendor: Pandora FMS
High (8,8) CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
PT-2024-15: Unauth Time-based SQL Injection in Pandora FMS
Fix date: March 19, 2024
Vector: Remote
Systems affected: Pandora FMS
Vendor: Pandora FMS
High (8,6) CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
PT-2024-14: Path Traversal and Untrusted Upload File in Pandora FMS
Fix date: March 19, 2024
Vector: Remote
Systems affected: Pandora FMS
Vendor: Pandora FMS
High (8,8) CVSS:CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
PT-2024-13: Unauth Time-based SQL Injection
Fix date: March 19, 2024
Vector: Remote
Systems affected: Pandora FMS
Vendor: Pandora FMS
High (8,7) CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
PT-2024-12: SQL Injection in Cacti
Fix date: December 24, 2023
Vector: Remote
Systems affected: Cacti
Vendor: Cacti
High (8,7) CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
PT-2024-11: Local file Inclusion in Cacti
Fix date: December 24, 2023
Vector: Remote
Systems affected: Cacti
Vendor: Cacti
Medium (5,1) CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
PT-2024-10: Cross-Site Scripting (DOM-based XSS) in Cacti
Fix date: May 13, 2024
Vector: Remote
Systems affected: Cacti
Vendor: Cacti
High (7,0) CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
PT-2024-09: Creating arbitrary files during project creation in PT Application Inspector (PT AI)
Fix date: July 31, 2024
Vector: Remote
Systems affected: PT Application Inspector (PT AI)
Vendor: Positive Technologies
High (8,4) CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
PT-2024-08: Reading arbitrary files when scanning a project linked to a git repository in PT Application Inspector (PT AI)
Fix date: July 31, 2024
Vector: Remote
Systems affected: PT Application Inspector (PT AI)
Vendor: Positive Technologies
High (8,4) CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
PT-2024-07: Reading arbitrary files via API in PT Application Inspector (PT AI)
Fix date: July 31, 2024
Vector: Remote
Systems affected: PT Application Inspector (PT AI)
Vendor: Positive Technologies
High (8,4) CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
PT-2024-06: Reading arbitrary files in the component Web IDE in PT Application Inspector (PT AI)
Fix date: July 31, 2024
Vector: Remote
Systems affected: PT Application Inspector (PT AI)
Vendor: Positive Technologies
High (9,3) CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:L/SA:L
PT-2024-05: Remote Code Execution when creating a project from a git repository in PT Application Inspector (PT AI)
Fix date: July 31, 2024
Vector: Remote
Systems affected: PT Application Inspector (PT AI)
Vendor: Positive Technologies
High (8,7) CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
PT-2024-04: Remote Code Execution at scan startup in PT Application Inspector (PT AI)
Fix date: July 31, 2024
Vector: Remote
Systems affected: PT Application Inspector (PT AI)
Vendor: Positive Technologies
Medium (5,1) CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
PT-2024-03: Vulnerability of reading internal application files in OpenKeychain
Fix date: February 6, 2024
Vector: Local
Systems affected: OpenKeychain
Vendor: OpenKeychain
High (8,8) CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
PT-2024-02: Stack Buffer Overflow to Remote Code Execution (RCE) in Moxa NPort W2150a/W2250a
Fix date: March 7, 2024
Vector: Remote
Systems affected: NPort W2150a/W2250a
Vendor: MOXA Inc.
Severity level
Date filters
Date range
Year
Month
Starts:
Year
Month
Ends:
Year
Month
Vendor
Company name
Systems affected
Software name
Reset filter
Editor’s Choice