Lucene search
+L

16260 matches found

Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•5 views

PT-2026-97341

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.36 Description The software contains a weak encoding mechanism for passwords. A low privileged attacker with local access could exploit this issue to achieve information...

6.3CVSS5.8AI score0.00081EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•3 views

PT-2026-97325

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description Improper Privilege Management allows a low privileged attacker with remote access to potentially gain unauthorized access. Recommendations Update Dell Secu...

6.8CVSS5.9AI score0.0021EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•10 views

CVE-2026-71177: Improper Restriction of Rendered UI Layers or Frames

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session...

5.4CVSS5.9AI score0.00138EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•4 views

PT-2026-97340

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An issue exists where authentication is missing for a critical function. This allows an unauthenticated attacker with remote access to potentially gain...

7.4CVSS6AI score0.00246EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•4 views

PT-2026-97332

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An issue exists involving the use of non-canonical URL paths for authorization decisions. This allows an unauthenticated remote attacker to potentially...

3.7CVSS6AI score0.00158EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•9 views

CVE-2026-73587: Improper Certificate Validation

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering,...

6.8CVSS5.8AI score0.00084EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•3 views

PT-2026-97334

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An improper certificate validation issue exists where an unauthenticated attacker with adjacent network access can exploit the flaw. This may result in...

6.8CVSS5.8AI score0.00084EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•10 views

CVE-2026-73591: Inclusion of Sensitive Information in Source Code

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

7.5CVSS6AI score0.00256EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•8 views

CVE-2026-71178: Use of Non-Canonical URL Paths for Authorization Decisions

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

3.7CVSS5.9AI score0.00158EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•8 views

CVE-2026-73588: Missing Authentication for Critical Function

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

7.4CVSS5.9AI score0.00246EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•9 views

CVE-2026-61413: Improper Privilege Management

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

6.8CVSS5.9AI score0.0021EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•2 views

PT-2026-97331

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An Improper Restriction of Rendered UI Layers or Frames issue exists where a low privileged attacker with remote access could potentially exploit the flaw ...

5.4CVSS6AI score0.00138EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/22 7:16 p.m.•11 views

CVE-2026-83964

Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction...

7.5CVSS0.00216EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 7:16 p.m.•8 views

CVE-2026-75689

Adobe Connect is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,...

9.3CVSS0.00304EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 7:16 p.m.•14 views

CVE-2026-75682

Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...

9.9CVSS0.00547EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 7:16 p.m.•11 views

CVE-2026-75698

Adobe Connect is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user...

9.3CVSS0.00322EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 7:16 p.m.•12 views

CVE-2026-75686

Adobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim...

9.3CVSS0.00637EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 7:16 p.m.•9 views

CVE-2026-75697

Adobe Connect is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,...

9.3CVSS0.00304EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 7:16 p.m.•11 views

CVE-2026-75684

Adobe Connect is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,...

9.3CVSS0.00304EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 7:16 p.m.•18 views

CVE-2026-34689

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

8.6CVSS0.00658EPSS
SaveExploits0References1
Rows per page
Query Builder