Lucene search
+L

2264 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 2:58 p.m.12 views

CVE-2026-4640

Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain functions to obtain sensitive information...

8.7CVSS5.9AI score0.00383EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 2:58 p.m.14 views

CVE-2026-4639

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS5.8AI score0.00299EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/24 6:31 a.m.18 views

EUVD-2026-14742

Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain functions to obtain sensitive information...

8.7CVSS5.9AI score0.00383EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/03/24 6:31 a.m.12 views

EUVD-2026-14740

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS5.8AI score0.00299EPSS
SaveExploits0References3
NVD
NVD
added 2026/03/24 5:16 a.m.12 views

CVE-2026-4639

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS0.00299EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/24 5:16 a.m.12 views

CVE-2026-4640

Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain functions to obtain sensitive information...

8.7CVSS0.00383EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/24 4:20 a.m.27 views

CVE-2026-4640

The CVE-2026-4640 entry concerns Vitals ESP from Galaxy Software Services, identified in multiple sources (NVD/NIST and CVE List) as a Missing Authentication vulnerability. Unauthenticated remote attackers can access certain functions to obtain sensitive information. Public metrics from TWCERT in...

8.7CVSS5.9AI score0.00383EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/24 4:20 a.m.5 views

CVE-2026-4640

Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain functions to obtain sensitive information...

8.7CVSS5.9AI score0.00383EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/03/24 4:20 a.m.35 views

CVE-2026-4640 Galaxy Software Services|Vitals ESP - Missing Authentication

Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain functions to obtain sensitive information...

8.7CVSS0.00383EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/03/24 4:17 a.m.37 views

CVE-2026-4639 Galaxy Software Services|Vitals ESP - Incorrect Authorization

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS0.00299EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/24 4:17 a.m.27 views

CVE-2026-4639

CVE-2026-4639 affects Vitals ESP by Galaxy Software Services. The vulnerability is described as Incorrect Authorization, enabling authenticated remote attackers to perform administrative functions and escalate privileges. The NVD/NVD-derived entries provide CVSS 4.0/3.1 values with HIGH severity ...

8.8CVSS5.8AI score0.00299EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/24 4:17 a.m.8 views

CVE-2026-4639

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS5.8AI score0.00299EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/03/24 4:17 a.m.7 views

CVE-2026-4639 Galaxy Software Services|Vitals ESP - Incorrect Authorization

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS5.8AI score0.00299EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/24 12:00 a.m.21 views

Galaxy Software Services Vitals ESP 安全漏洞

Galaxy Software Services Vitals ESP is an office knowledge management system developed by Galaxy Software Services. There is a security vulnerability in Galaxy Software Services Vitals ESP, which stems from improper authorization. This vulnerability could allow authenticated remote attackers to...

8.8CVSS5.9AI score0.00299EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/24 12:00 a.m.13 views

PT-2026-27329

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS5.8AI score0.00299EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2026/03/23 12:00 a.m.13 views

(Pwn2Own) Samsung Galaxy S25 Smart Touch Call Application Protection Mechanism Failure Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Samsung Galaxy S25. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5.9CVSS5.7AI score0.00427EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/03/23 12:00 a.m.16 views

(Pwn2Own) Samsung Galaxy S25 Samsung Account Open Redirect Security Bypass Vulnerability

This vulnerability allows remote attackers to bypass security on affected installations of Samsung Galaxy S25. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Samsung Account application. An attacker can force a redirection to a site that serves...

5.6CVSS5.9AI score0.00152EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/03/23 12:00 a.m.13 views

(Pwn2Own) Samsung Galaxy S25 Samsung Account Cross-Site Scripting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary script on affected installations of Samsung Galaxy S25. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Samsung Account application. The issue results from the lack of proper validati...

6.3CVSS6.1AI score0.00192EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/16 3:30 p.m.10 views

EUVD-2026-12319

Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege...

5.9CVSS5.8AI score0.00117EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/03/16 3:30 p.m.17 views

EUVD-2026-12321

Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary application...

5.9CVSS5.9AI score0.00068EPSS
SaveExploits0References2
Rows per page
Query Builder