Lucene search
+L

56712 matches found

NVD
NVD
•added 2026/04/24 12:16 a.m.•15 views

CVE-2026-40623

A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inadequate enforcement of constraints on sensitive functions, parameters such as IP addressing, watchd...

8.1CVSS0.00586EPSS
SaveExploits0References3
NVD
NVD
•added 2026/04/24 12:16 a.m.•12 views

CVE-2026-35064

A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and management interfaces without requiring credentials. Because discovery functions are...

8.7CVSS0.00633EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/04/24 12:04 a.m.•44 views

CVE-2026-35064 SenseLive X3050 Missing authentication for critical function

A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and management interfaces without requiring credentials. Because discovery functions are...

8.7CVSS0.00633EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/24 12:04 a.m.•36 views

CVE-2026-35064

CVE-2026-35064 concerns SenseLive X3050’s management ecosystem. The vulnerability allows unauthenticated discovery of deployed units via the vendor’s management protocol, enabling an attacker on the same network segment to identify device presence, identifiers, and management interfaces because d...

8.7CVSS5.8AI score0.00633EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/24 12:04 a.m.•8 views

CVE-2026-35064 SenseLive X3050 Missing authentication for critical function

A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and management interfaces without requiring credentials. Because discovery functions are...

8.7CVSS5.2AI score0.00633EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/24 12:04 a.m.•9 views

CVE-2026-35064

A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and management interfaces without requiring credentials. Because discovery functions are...

8.7CVSS5.8AI score0.00633EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2026/04/24 12:02 a.m.•44 views

CVE-2026-40620 SenseLive X3050 Missing authentication for critical function

A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorization on the SenseLive config application. The service accepts management connections from any reachable host, enabling unrestricted...

9.8CVSS0.00832EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/24 12:02 a.m.•6 views

CVE-2026-40620

A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorization on the SenseLive config application. The service accepts management connections from any reachable host, enabling unrestricted...

9.8CVSS5.8AI score0.00832EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2026/04/24 12:02 a.m.•15 views

EUVD-2026-25362

A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorization on the SenseLive config application. The service accepts management connections from any reachable host, enabling unrestricted...

9.8CVSS5.8AI score0.00832EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
•added 2026/04/24 12:00 a.m.•12 views

Apple Silicon Vulnerability Research — A18 Pro (MacBook Neo)

This is systematic security research targeting Apple's A18 Pro chip MacBook Neo / Mac17,5, the first A-series SoC shipped in a Mac laptop. The MacBook Neo is used as an authorized Apple Security Research Device SRD and doubles as a high-visibility proxy for iPhone 16 Pro research, since A18 Pro i...

5.2AI score
SaveExploits0
CNNVD
CNNVD
•added 2026/04/24 12:00 a.m.•21 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the wifi rtw88 driver failing to release the USB device reference when detection fails, resulting...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/24 12:00 a.m.•14 views

PT-2026-35006

In the Linux kernel, the following vulnerability has been resolved: mm/vma: fix memory leak in mmap region commit 605f6586ecf7 "mm/vma: do not leak memory when .mmap prepare swaps the file" handled the success path by skipping get file via file doesnt need get, but missed the error path. When...

5.4AI score0.00162EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/24 12:00 a.m.•17 views

PT-2026-35015

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free issue exists in the xfrm component of the Linux kernel. After asynchronous crypto completes, the xfrm input resume function calls dev put immediately upon re-entry befor...

7.8CVSS5.7AI score0.00133EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/04/24 12:00 a.m.•50 views

CVE-2026-30368

A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices...

5.4CVSS0.00344EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/04/24 12:00 a.m.•16 views

SenseLive X3050 跨站请求伪造漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a cross-site request forgeing vulnerability. This vulnerability arises from the lack of protection against cross-site request forgeing in the w...

8.4CVSS5.7AI score0.00249EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/24 12:00 a.m.•17 views

PT-2026-34810

Name of the Vulnerable Software and Affected Versions SenseLive X3050 affected versions not specified Description The embedded management service in the SenseLive config application lacks authentication and authorization. This allows any reachable host to establish full administrative control and...

9.8CVSS5.3AI score0.00832EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/04/24 12:00 a.m.•24 views

PT-2026-34806

A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and management interfaces without requiring credentials. Because discovery functions are...

8.7CVSS5.8AI score0.00633EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/04/24 12:00 a.m.•20 views

SenseLive X3050 访问控制错误漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a access control vulnerability, which stems from the exposure of management protocols via the discovery function. This vulnerability could allo...

8.7CVSS5.8AI score0.00633EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/24 12:00 a.m.•20 views

D-Link DWM-222W USB Wi-Fi Adapter 安全漏洞

The D-Link DWM-222W USB Wi-Fi Adapter is a USB wireless modem from D-Link Corporation. It supports 4G LTE network connections. There is a security vulnerability in the D-Link DWM-222W USB Wi-Fi Adapter. This vulnerability stems from a bypass of brute-force password protection, allowing...

8.7CVSS5.9AI score0.00542EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/24 12:00 a.m.•28 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the usb gadget fhid driver repeatedly initializing the cdev device during rebinding operations,...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits1References1
Rows per page
Query Builder