Lucene search
+L

74000 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•18 views

CVE-2026-17644: Use of Hard-coded Credentials

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data due to the use of hard-coded credentials...

8.8CVSS5.9AI score0.00101EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•17 views

CVE-2026-17643: Insufficiently Protected Credentials

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials...

8.8CVSS5.8AI score0.00103EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•10 views

CVE-2026-65113: Use of Hard-coded Credentials

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, and information disclosure...

9.8CVSS5.8AI score0.00674EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•17 views

CVE-2026-75633: Improper Input Validation

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user...

5.5CVSS5.9AI score0.0024EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•13 views

PT-2026-96818

Name of the Vulnerable Software and Affected Versions Databasement versions prior to 1.7.14 Description An authorization bypass occurs because invitation tokens are validated only when the acceptance page loads. The system caches the authorization decision and fails to re-verify the token validit...

9.1CVSS5.8AI score0.00514EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•16 views

CVE-2026-18124: Insufficiently Protected Credentials

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials...

6.5CVSS5.8AI score0.00096EPSS
SaveExploits0References3
Nvidia
Nvidia
•added 2026/09/22 12:00 a.m.•32 views

Security Bulletin: NVIDIA Infrastructure Controller - September 2026

NVIDIA has released a software update for NVIDIA® Infrastructure Controller. To protect your system, clone or update this software to version 2.0 or later from NVIDIA/infra-controller on GitHub. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities th...

6AI score0.01624EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•9 views

PT-2026-96962

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Integer Overflow or Wraparound issue exists, which can lead to an application denial-of-service. An attacker can cause the application to crash by inducing a victim to visi...

5.5CVSS5.7AI score0.00251EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•9 views

PT-2026-96937

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description Improper input validation can lead to an application denial-of-service, allowing an attacker to crash the application. Exploitation requires user interaction, such as visiting...

5.5CVSS5.8AI score0.0024EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•15 views

PT-2026-97078

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data due to the use of hard-coded credentials...

8.8CVSS5.9AI score0.00101EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•13 views

PT-2026-96741

Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description NVIDIA Infrastructure Controller for Linux contains hard-coded credentials that can be used to authenticate to the controller/management interface. An...

9.8CVSS5.7AI score0.00674EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•15 views

CVE-2026-75634: Improper Input Validation

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user...

4.3CVSS5.5AI score0.00588EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•16 views

CVE-2026-19480: Improper Input Validation

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

7.5CVSS5.9AI score0.00608EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•7 views

PT-2026-97077

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Insufficiently protected credentials may allow a local attacker to obtain sensitive information and perform unauthorized actions...

8.8CVSS5.8AI score0.00103EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•17 views

CVE-2026-92882: Insufficiently Protected Credentials

Insufficiently protected credentials in the host and folder configuration endpoints of the REST API in Checkmk 2.5.0p15, 2.4.0p38, 2.3.0p51 and 2.2.0 EOL allows an authenticated user who may view a host's configuration to read stored SNMP community strings, SNMPv3 auth and privacy pass phrases an...

5.3CVSS5.8AI score0.00351EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•11 views

PT-2026-96826

Name of the Vulnerable Software and Affected Versions LightRAG versions prior to 1.5.5 Description LightRAG contains a Server-Side Request Forgery SSRF issue in its native markdown parser. The validated addresses function in lightrag/parser/markdown/parser.py fails to consistently decode IPv6...

7.1CVSS5.8AI score0.00217EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•12 views

PT-2026-96939

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An improper input validation issue exists that could lead to a security feature bypass. A remote attacker could exploit this to bypass security measures and obtain unauthorize...

7.8CVSS6.5AI score0.00718EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•10 views

PT-2026-96946

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description Requests to the HTTP MCP endpoint without a per-user identity can reach tool handlers that utilize globally configured Jira or Confluence credentials. This allows a network caller to perform...

9.1CVSS5.8AI score0.0062EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•16 views

PT-2026-96992

Name of the Vulnerable Software and Affected Versions Analytics and Location Engine affected versions not specified Description The Analytics and Location Engine ALE and its underlying operating system utilize default, hard-coded credentials for multiple system and administrative accounts. An...

9.8CVSS6AI score0.00594EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•12 views

PT-2026-96938

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description Improper input validation allows a remote attacker to bypass security features and obtain unauthorized limited write access. Exploitation requires user interaction, such as...

5CVSS5.5AI score0.00588EPSS
SaveExploits0References7
Rows per page
Query Builder