Lucene search
+L

1253 matches found

NVD
NVD
•added 2026/04/24 12:16 a.m.•22 views

CVE-2026-40623

A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inadequate enforcement of constraints on sensitive functions, parameters such as IP addressing, watchd...

8.1CVSS0.00586EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/24 12:02 a.m.•20 views

EUVD-2026-25362

A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorization on the SenseLive config application. The service accepts management connections from any reachable host, enabling unrestricted...

9.8CVSS5.8AI score0.00832EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/04/23 11:58 p.m.•64 views

CVE-2026-40623 SenseLive X3050 Missing Authorization

A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inadequate enforcement of constraints on sensitive functions, parameters such as IP addressing, watchd...

8.1CVSS0.00586EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/04/23 12:00 a.m.•15 views

SATO CL4NX Printers Incorrect Authorization (CVE-2023-23594)

An authentication bypass vulnerability in the web client interface for the CL4NX printer before firmware version 1.13.3-u724r2 provides remote unauthenticated attackers with access to execute commands intended only for valid/authenticated users, such as file uploads and configuration changes. Thi...

9.8CVSS8.7AI score0.01504EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/04/22 1:18 p.m.•12 views

CVE-2026-6355

A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct object references. This could lead to unauthorized access to sensitive information and unauthorized changes to the tenant's configuration...

6.5CVSS5.8AI score0.00293EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/22 1:18 p.m.•13 views

CVE-2026-6355 CVE-2026-6355

A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct object references. This could lead to unauthorized access to sensitive information and unauthorized changes to the tenant's configuration...

5.8AI score0.00293EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/22 12:00 a.m.•28 views

Augmentt security vulnerabilities

Augmentt is a SaaS management and automation platform developed by Augmentt Inc. in Canada. There is a security vulnerability in Augmentt, which stems from insecure direct object references in web applications. This vulnerability could allow unauthorized users to access and manipulate sensitive...

6.5CVSS5.8AI score0.00293EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/22 12:00 a.m.•38 views

PT-2026-36652

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description The built-in SSH server uses default configurations that advertise weak or broken key exchange, MAC, and host key algorithms. Specifically, the server supports the ecdh-sha2-nistp256,...

6.3CVSS5.8AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/04/20 6:31 a.m.•22 views

EUVD-2026-23755

SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue. The device configuration may be altered without authentication...

6.9CVSS5.7AI score0.0047EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/20 3:18 a.m.•60 views

CVE-2026-32962

SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue. The device configuration may be altered without authentication...

6.9CVSS0.0047EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/20 3:18 a.m.•45 views

CVE-2026-32962

CVE-2026-32962 affects the SD-330AC and AMC Manager from Silex Technology, with a missing authentication for a critical function that could allow device configuration to be altered without authentication. Per the available metrics, the CVSS scores are 5.3 (3.1 CVSS) and 6.9 (4.0 CVSS), both indic...

6.9CVSS7.2AI score0.0047EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/20 12:00 a.m.•21 views

PT-2026-33700

SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue. The device configuration may be altered without authentication...

6.9CVSS5.7AI score0.0047EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/04/20 12:00 a.m.•28 views

Silex SD-330AC and Silex AMC Manager have security vulnerabilities

Silex SD-330AC and Silex AMC Manager are both products of the Japanese company Silex. Silex SD-330AC is a device server that provides wireless network connectivity and the ability to share with USB devices. Silex AMC Manager is a management software used for centralized management of device serve...

6.9CVSS7.3AI score0.0047EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/15 8:40 p.m.•11 views

CVE-2026-40173

Dgraph is an open source distributed GraphQL database. Versions 25.3.1 and prior contain an unauthenticated credential disclosure vulnerability where the /debug/pprof/cmdline endpoint is registered on the default mux and reachable without authentication, exposing the full process command line...

9.4CVSS5.6AI score0.00597EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
•added 2026/04/15 6:31 p.m.•31 views

EUVD-2026-22938

A prompt injection vulnerability in Windsurf 1.9544.26 allows remote attackers to execute arbitrary commands on a victim system. When Windsurf processes attacker-controlled HTML content, malicious instructions can cause unauthorized modification of the local MCP configuration and automatic...

8CVSS6.8AI score0.00326EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/15 12:00 a.m.•7 views

CVE-2026-30615

A prompt injection vulnerability in Windsurf 1.9544.26 allows remote attackers to execute arbitrary commands on a victim system. When Windsurf processes attacker-controlled HTML content, malicious instructions can cause unauthorized modification of the local MCP configuration and automatic...

6.8AI score0.00326EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/15 12:00 a.m.•26 views

PT-2026-33069

Name of the Vulnerable Software and Affected Versions Windsurf version 1.9544.26 Cursor affected versions not specified VS Code affected versions not specified Claude Code affected versions not specified Gemini-CLI affected versions not specified Description A prompt injection issue allows remote...

8CVSS6.6AI score0.00326EPSS
SaveExploits0References25
CVE
CVE
•added 2026/04/15 12:00 a.m.•103 views

CVE-2026-30615

A prompt injection vulnerability in Windsurf version 1.9544.26 allows remote attackers to execute arbitrary commands on a victim system. The flaw is triggered when the application processes attacker-controlled HTML content , which can lead to unauthorized modification of the local MCP configurati...

8CVSS6.8AI score0.00326EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/15 12:00 a.m.•36 views

CVE-2026-30615

A prompt injection vulnerability in Windsurf 1.9544.26 allows remote attackers to execute arbitrary commands on a victim system. When Windsurf processes attacker-controlled HTML content, malicious instructions can cause unauthorized modification of the local MCP configuration and automatic...

0.00326EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/04/13 7:22 p.m.•19 views

CVE-2026-21916

A UNIX Symbolic Link Symlink Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system. When after a user has performed a specific 'file lin...

7.3CVSS5.8AI score0.00129EPSS
SaveExploits0References1
Rows per page
Query Builder