Lucene search
K

5810 matches found

Cvelist
Cvelist
added 2026/04/17 7:46 a.m.28 views

CVE-2026-33392

In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypass...

7.2CVSS0.00001EPSS
Exploits0References1
CVE
CVE
added 2026/04/17 7:46 a.m.6 views

CVE-2026-33392

CVE-2026-33392 affects JetBrains YouTrack prior to version 2025.3.131383. The vulnerability enables a remote code execution (RCE) by a high-privilege user via a sandbox bypass. The available descriptions indicate an attacker with high privileges can trigger code execution, with impact on confiden...

7.2CVSS5.7AI score0.00001EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/17 12:0 a.m.0 views

PT-2026-33440

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain with Data Domain Operating System DD OS versions 8.4 through 8.5 Description A session fixation issue exists where a high privileged attacker with remote access could potentially gain unauthorized access...

7.2CVSS5.8AI score0.00023EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/04/17 12:0 a.m.1 views

PT-2026-33442

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain with Data Domain Operating System DD OS versions 8.4 through 8.5 Description An improper authentication issue exists where a high privileged attacker with remote access could potentially gain unauthorized access...

6.6CVSS5.8AI score0.00023EPSS
Exploits0References3
EUVD
EUVD
added 2026/04/16 6:31 p.m.1 views

EUVD-2025-209502

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an improper check for unusual or exceptional conditions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service...

4.1CVSS5.8AI score0.00006EPSS
Exploits0References2
CVE
CVE
added 2026/04/16 5:59 p.m.6 views

CVE-2025-43935

Dell PowerScale OneFS (before version 9.12.0.0) contains an improper resource shutdown or release vulnerability. A high-privilege attacker with local access could potentially cause a denial of service. Affected component: OneFS; root cause: improper shutdown or release of resources. CVSS info ind...

4.4CVSS5.8AI score0.00007EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2026/04/16 5:54 p.m.6 views

CVE-2025-43883

Summary (CVE-2025-43883) : Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an improper check for unusual or exceptional conditions. A high-privilege attacker with local access could potentially trigger a denial of service. The affected component is the OneFS software stack mentioned i...

4.1CVSS5.8AI score0.00006EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2026/04/16 12:54 a.m.1 views

EUVD-2026-23112

Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role...

5.1CVSS5.8AI score0.00032EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/16 12:0 a.m.1 views

PT-2026-33348

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an improper check for unusual or exceptional conditions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service...

4.1CVSS5.8AI score0.00006EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/04/16 12:0 a.m.0 views

PT-2026-33349

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an improper resource shutdown or release vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service...

4.4CVSS5.8AI score0.00007EPSS
Exploits0References3
NVD
NVD
added 2026/04/15 10:16 p.m.1 views

CVE-2026-1564

Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role...

5.1CVSS0.00032EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/15 9:32 p.m.0 views

CVE-2026-1711

Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role...

4.8CVSS5.8AI score0.00033EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/15 9:32 p.m.2 views

CVE-2026-1711 Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role.

Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role...

4.8CVSS5.8AI score0.00033EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/15 9:31 p.m.0 views

CVE-2026-1564 Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role.

Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role...

5.1CVSS5.8AI score0.00032EPSS
Exploits0References1
CVE
CVE
added 2026/04/15 9:31 p.m.4 views

CVE-2026-1564

Affected product: Pega Platform (versions 8.1.0–25.1.1). Vulnerability: HTML Injection in a UI component. Root cause/impact: HTML injection possible in a high-privilege developer UI context; attack requires a high-privilege user with a developer role; affected confidentiality and integrity are ra...

5.1CVSS5.8AI score0.00032EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/04/15 9:31 p.m.14 views

CVE-2026-1564 Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role.

Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role...

5.1CVSS0.00032EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/15 12:0 a.m.1 views

PT-2026-33177

CVE-2026-1564 Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a develo… https://t.co/ErpdMh2IGe...

5.1CVSS5.8AI score0.00032EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/14 9:53 p.m.1 views

CVE-2026-27308

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. A high-privileged attacker could exploit this vulnerability and exhaust system resources, reducing application speed. Exploitation o...

2.4CVSS5.8AI score0.00032EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/14 9:53 p.m.0 views

CVE-2026-27308 ColdFusion | Uncontrolled Resource Consumption (CWE-400)

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. A high-privileged attacker could exploit this vulnerability and exhaust system resources, reducing application speed. Exploitation o...

2.4CVSS5.8AI score0.00032EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/14 9:53 p.m.12 views

CVE-2026-27307 ColdFusion | Uncontrolled Resource Consumption (CWE-400)

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. A high-privileged attacker could exploit this vulnerability and exhaust system resources, reducing application speed. Exploitation o...

2.4CVSS0.00032EPSS
Exploits0References1
Rows per page
Query Builder