Lucene search
+L

103 matches found

CISA KEV Catalog
CISA KEV Catalog
•added 2026/09/25 12:00 a.m.•14 views

Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060...

9.8CVSS7.4AI score0.06392EPSS
SaveIn wildExploits7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•10 views

CVE-2026-82406: Improper Enforcement of Behavioral Workflow

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function core/kapp/market/market.go Buy does not check IsClaimed before accepting a bid. A seller can use the Claim seller-accept branch to settle a resting-bid auction while leaving the...

7.1CVSS5.8AI score0.00341EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/22 3:17 p.m.•11 views

CVE-2026-65126

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workflow. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...

8.8CVSS0.00343EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/22 2:10 p.m.•30 views

CVE-2026-65126

The NVIDIA Infrastructure Controller for Linux is affected by CVE-2026-65126 , which involves the improper enforcement of a behavioral workflow (CWE-841). A successful exploit could result in data tampering , denial of service , and information disclosure . This vulnerability affects versions 0 t...

8.8CVSS5.7AI score0.00343EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/09/22 2:10 p.m.•41 views

CVE-2026-65126

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workflow. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...

5CVSS0.00343EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/22 2:10 p.m.•8 views

CVE-2026-65126

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workflow. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...

5CVSS5.7AI score0.00343EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•9 views

CVE-2026-65126: Improper Enforcement of Behavioral Workflow

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workflow. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...

8.8CVSS5.7AI score0.00343EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•4 views

PT-2026-96749

Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description An issue exists where an attacker could cause improper enforcement of a behavioral workflow. This could lead to data tampering, denial of service, and...

8.8CVSS5.7AI score0.00343EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•2 views

CVE-2026-78135: Improper Enforcement of Behavioral Workflow

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...

7.3CVSS5.8AI score0.00362EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/30 12:30 a.m.•17 views

EUVD-2026-68138

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

5.5CVSS5.6AI score0.00437EPSS
SaveExploits0References7
NVD
NVD
•added 2026/08/29 11:17 p.m.•15 views

CVE-2026-82423

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

5.5CVSS0.00437EPSS
SaveExploits0References6
OSV
OSV
•added 2026/08/29 10:15 p.m.•13 views

CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

5.3CVSS5.5AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/08/29 10:15 p.m.•9 views

CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

5.5CVSS5.4AI score0.00437EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/29 10:15 p.m.•29 views

CVE-2026-82423

A behavioral workflow enforcement vulnerability exists in the macrozheng mall project (up to version 1.0.3 ). The issue affects the Payment Status Endpoint at the file /order/paySuccess, where manipulation of the orderId argument allows a remote, low-privilege attacker to enforce a behavioral wor...

5.5CVSS5.4AI score0.00437EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/29 12:00 a.m.•23 views

PT-2026-83500

Name of the Vulnerable Software and Affected Versions macrozheng mall versions prior to 1.0.4 Description A remote issue exists in the Payment Status Endpoint component within the /order/paySuccess file. Manipulation of the orderId argument allows an attacker to enforce a behavioral workflow...

5.5CVSS6AI score0.00437EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/29 12:00 a.m.•2 views

CVE-2026-82423: Improper Enforcement of Behavioral Workflow

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

5.5CVSS5.4AI score0.00437EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2026/08/28 2:00 p.m.•17 views

Chromium: CVE-2026-79083 Improper enforcement of behavioral workflow in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

7.5CVSS7.2AI score0.00362EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/08/26 2:21 p.m.•9 views

CVE-2026-79083

A flaw was found in Google Chrome's Media component. A remote attacker, who has already compromised the browser's renderer process, could exploit an improper enforcement of behavioral workflow. By presenting a specially crafted HTML page, the attacker could potentially execute unauthorized code...

7.5CVSS7.2AI score0.00362EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-79083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process ...

7.5CVSS7.3AI score0.00362EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/25 11:41 p.m.•11 views

Improper Enforcement of Behavioral Workflow

Overview Affected versions of this package are vulnerable to Improper Enforcement of Behavioral Workflow via the PATCH /api/teams/id process. An attacker can disrupt team-based access control by submitting a malformed members payload, which results in the removal of all existing team members befo...

8.8CVSS5.8AI score0.00356EPSS
SaveExploits0References2
Rows per page
Query Builder