Lucene search
+L

13336 matches found

Kitploit
Kitploit
•added 2026/10/08 1:13 p.m.•15 views

CVE-2018-4878-

-cms Server cluster batch identification of cms, batch backup search, batch injection. VIP group version backup...

7.8CVSS8.2AI score0.89532EPSS
SaveExploits19
Kitploit
Kitploit
•added 2026/10/07 6:27 p.m.•11 views

CVE-2026-36438

CVE-2026-36438: Sensitive information via password reset The Intelbras VIP 1230 B/D G4 versions prior to 6 allows a remote attacker to obtain sensitive information of administrator account via password reset functionality under OutsideCmd file. Discovered by Henrique Koji, Feb 2026. References:...

5.3CVSS6.1AI score0.00483EPSS
SaveExploits0
NVD
NVD
•added 2026/10/01 6:17 a.m.•17 views

CVE-2026-80276

Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read i...

7.5CVSS0.00368EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/01 6:17 a.m.•14 views

CVE-2026-80275

Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer administrator account password...

8.8CVSS0.00251EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/01 5:51 a.m.•12 views

EUVD-2026-90504

Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer administrator account password...

8.8CVSS5.8AI score0.00251EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/01 5:51 a.m.•27 views

CVE-2026-80275

The Comelit Multi-User Gateway for VIP System (model 1456B) is vulnerable in firmware versions 2.9.1 and 2.10.0 due to a failure to enforce server-side authorization on an administrative password-change function. This flaw allows an authenticated user level to invoke the function and overwrite th...

8.8CVSS5.8AI score0.00251EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/01 5:51 a.m.•10 views

EUVD-2026-90503

Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read i...

7.5CVSS5.7AI score0.00368EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/01 5:51 a.m.•24 views

CVE-2026-80276

The Comelit Multi-User Gateway for VIP System (model 1456B) is vulnerable in firmware versions 2.9.1 and 2.10.0 . These versions expose a network-accessible management interface that lacks authentication requirements. A remote, unauthenticated attacker can exploit this to read sensitive device co...

7.5CVSS5.7AI score0.00368EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•8 views

PT-2026-103697

Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer administrator account password...

8.8CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•8 views

PT-2026-103698

Name of the Vulnerable Software and Affected Versions Comelit Multi-User Gateway for VIP System model 1456B version 2.9.1 Comelit Multi-User Gateway for VIP System model 1456B version 2.10.0 Description A network-accessible management interface does not require authentication. This allows a remot...

7.5CVSS5.8AI score0.00368EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/01 12:00 a.m.•3 views

CVE-2026-80276: Missing Authentication for Critical Function

Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read i...

7.5CVSS5.7AI score0.00368EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/09/25 11:50 p.m.•19 views

SUSE CVE-2026-93223

In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix ofnodeput on VIP parse errors tegravipchannelofparse initializes np from dev-ofnode without taking a reference, but its error paths drop one through the errnodeput label. This underflows the...

5.8AI score0.00168EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/25 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-93223

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: media: tegra-video: fix ofnodeput on VIP parse errors tegravipchannelofparse initializes np from dev-ofnode without taking a reference, but its error...

5.8AI score0.00168EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/24 4:17 p.m.•13 views

CVE-2026-93223

In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix ofnodeput on VIP parse errors tegravipchannelofparse initializes np from dev-ofnode without taking a reference, but its error paths drop one through the errnodeput label. This underflows the...

0.00168EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/24 3:21 p.m.•36 views

CVE-2026-93223 staging: media: tegra-video: fix of_node_put() on VIP parse errors

In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix ofnodeput on VIP parse errors tegravipchannelofparse initializes np from dev-ofnode without taking a reference, but its error paths drop one through the errnodeput label. This underflows the...

0.00168EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/24 3:21 p.m.•13 views

CVE-2026-93223 staging: media: tegra-video: fix of_node_put() on VIP parse errors

In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix ofnodeput on VIP parse errors tegravipchannelofparse initializes np from dev-ofnode without taking a reference, but its error paths drop one through the errnodeput label. This underflows the...

5.8AI score
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•9 views

CVE-2026-93223: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix ofnodeput on VIP parse errors tegravipchannelofparse initializes np from dev-ofnode without taking a reference, but its error paths drop one through the errnodeput label. This underflows the...

5.8AI score0.00168EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•7 views

PT-2026-97890

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tegra vip channel of parse function where the np variable is initialized from dev-of node without taking a reference. When endpoint parsing fails due to a malforme...

8.8CVSS7.2AI score0.007EPSS
SaveExploits0References312
CBLMariner
CBLMariner
•added 2026/09/18 2:58 p.m.•14 views

CVE-2026-84445 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10

CVE-2026-84445 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10. An upgraded version of the package is available that resolves this issue...

8.7CVSS5.8AI score0.00641EPSS
SaveExploits0
CBLMariner
CBLMariner
•added 2026/09/18 2:58 p.m.•14 views

CVE-2026-37236 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10

CVE-2026-37236 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10. A patched version of the package is available...

9.8CVSS5.8AI score0.00434EPSS
SaveExploits0
Rows per page
Query Builder