Lucene search
K

61 matches found

RedhatCVE
RedhatCVE
added 2026/06/02 4:1 p.m.8 views

CVE-2026-48136

When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain CMA can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permission...

4.1CVSS5.8AI score0.03796EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/26 12:57 p.m.7 views

CVE-2026-48136 Authenticated Administrator Role-Based Access Control Bypass in Compliance

When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain CMA can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permission...

4.1CVSS5.8AI score0.03796EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/26 12:57 p.m.38 views

CVE-2026-48136 Authenticated Administrator Role-Based Access Control Bypass in Compliance

When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain CMA can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permission...

4.1CVSS0.03796EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/26 12:57 p.m.7 views

CVE-2026-48136

When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain CMA can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permission...

4.1CVSS5.8AI score0.03796EPSS
Exploits0References2
CVE
CVE
added 2026/05/26 12:57 p.m.23 views

CVE-2026-48136

CVE-2026-48136 affects Check Point Multi-Domain Management where, when Compliance is enabled, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata for Compliance Best Practices in another CMA where they have no access, effectively bypassi...

4.1CVSS5.8AI score0.03796EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.8 views

PT-2026-43240

When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain CMA can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permission...

4.1CVSS5.8AI score0.03796EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.6 views

Check Point Multi-Domain Management 安全漏洞

Check Point Multi-Domain Management is a centralized security management platform provided by Check Point Israel. Check Point Multi-Domain Management has a security vulnerability. This vulnerability arises from the fact that when compliance is enabled in the multi-domain management system, verifi...

4.1CVSS5.8AI score0.03796EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/24 12:0 a.m.4 views

PT-2026-34924

In the Linux kernel, the following vulnerability has been resolved: i2c: designware: amdisp: Fix resume-probe race condition issue Identified resume-probe race condition in kernel v7.0 with the commit 38fa29b01a6a "i2c: designware: Combine the init functions",but this issue existed from the...

5.3AI score0.00088EPSS
Exploits0References4
OSV
OSV
added 2025/12/22 12:0 a.m.2 views

ALSA-2025:23739 Important: mod_md security update

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fixes: modmd:...

7.5CVSS6.8AI score0.00402EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/12/03 12:0 a.m.2 views

PT-2025-48951

WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote authenticated users to execute arbitrary code as root via domain creation. The attacker needs "Create and manage sites" with "Domains management" and "Subdomains management."...

7.8CVSS7.8AI score0.00211EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-19556

Malware in sbrugna...

5.7CVSS5.2AI score0.00791EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2011-2647

Malware in sbrugna...

3.6CVSS6.3AI score0.00302EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2012-5982

Malware in sbrugna...

2.1CVSS6.3AI score0.00371EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-22274

Malicious code in bioql PyPI...

5.3CVSS6.6AI score0.0037EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:25 a.m.6 views

CVE-2024-42612

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?whitelistadd...

8.8CVSS7.5AI score0.00273EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/08 2:25 p.m.5 views

CVE-2024-24911

In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the cpca process is down, VPN and SIC connectivity issues may occur if the CRL is not present in the Security Gateway's CRL cache...

5.3CVSS6.8AI score0.0037EPSS
Exploits0References1
OSV
OSV
added 2025/02/06 2:15 p.m.2 views

CVE-2024-24911

In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the cpca process is down, VPN and SIC connectivity issues may occur if the CRL is not present in the Security Gateway's CRL cache...

7.5CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2024/08/20 7:15 p.m.14 views

CVE-2024-42619

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?id=0&list=whitelist&remove=pligg.com...

8.8CVSS0.00246EPSS
Exploits1References1
OSV
OSV
added 2024/08/20 6:15 p.m.5 views

CVE-2024-42612

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?whitelistadd...

8.8CVSS7.5AI score
Exploits0References1
Cvelist
Cvelist
added 2024/08/20 12:0 a.m.9 views

CVE-2024-42619

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?id=0&list=whitelist&remove=pligg.com...

0.00246EPSS
Exploits1References1
Rows per page
Query Builder