Lucene search
+L

44 matches found

NVD
NVD
added 2026/07/07 12:16 p.m.15 views

CVE-2026-13696

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in HAVELSAN Inc. Liman MYS allows LDAP Injection. This issue affects Liman MYS: before release.Master.1107...

8.8CVSS0.00355EPSS
Exploits0References1
NVD
NVD
added 2026/07/07 12:16 p.m.14 views

CVE-2026-11348

Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows Fake the Source of Data. This issue affects Liman MYS: before release.Master.1107...

8.1CVSS0.00185EPSS
Exploits0References1
NVD
NVD
added 2026/07/07 11:16 a.m.14 views

CVE-2026-11340

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: before release.Master.1107...

8.3CVSS0.00195EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/07/07 11:15 a.m.32 views

CVE-2026-13696 LDAP Injection in HAVELSAN's Liman MYS

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in HAVELSAN Inc. Liman MYS allows LDAP Injection. This issue affects Liman MYS: before release.Master.1107...

8.8CVSS0.00355EPSS
Exploits0References1
CVE
CVE
added 2026/07/07 11:15 a.m.11 views

CVE-2026-13696

HAVELSAN Inc. Liman MYS is affected by CVE-2026-13696 due to improper neutralization of special elements in LDAP queries (LDAP injection) in versions prior to release.Master.1107. The issue enables network-based LDAP injection with high impact on confidentiality, integrity, and availability (CVSS...

8.8CVSS5.9AI score0.00355EPSS
Exploits0References1
EUVD
EUVD
added 2026/07/07 11:15 a.m.5 views

EUVD-2026-42035

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in HAVELSAN Inc. Liman MYS allows LDAP Injection. This issue affects Liman MYS: before release.Master.1107...

8.8CVSS5.9AI score0.00355EPSS
Exploits0References1
EUVD
EUVD
added 2026/07/07 11:11 a.m.6 views

EUVD-2026-42034

Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows Fake the Source of Data. This issue affects Liman MYS: before release.Master.1107...

8.1CVSS5.9AI score0.00185EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/07 11:11 a.m.8 views

CVE-2026-11348

Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows Fake the Source of Data. This issue affects Liman MYS: before release.Master.1107...

8.1CVSS5.9AI score0.00185EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/07/07 11:11 a.m.33 views

CVE-2026-11348 Authentication Bypass in HAVELSAN's Open Source Project Liman MYS

Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows Fake the Source of Data. This issue affects Liman MYS: before release.Master.1107...

8.1CVSS0.00185EPSS
Exploits0References1
CVE
CVE
added 2026/07/07 11:11 a.m.13 views

CVE-2026-11348

The CVE-2026-11348 vulnerability affects HAVELSAN Liman MYS (before release.Master.1107) and is caused by improper verification of a cryptographic signature. The entry indicates a remote attack vector (Network) with high impact across confidentiality, integrity, and availability (CVSS v3.1: 8.1, ...

8.1CVSS5.9AI score0.00185EPSS
Exploits0References1
CVE
CVE
added 2026/07/07 11:1 a.m.29 views

CVE-2026-11340

CVE-2026-11340 describes a Missing Authorization vulnerability in HAVELSAN’s Liman MYS prior to release.Master.1107, where functionality is accessible without proper ACL constraints. Core issue: access to certain features is not properly constrained by ACLs, enabling unauthorized access. Accordin...

8.3CVSS5.9AI score0.00195EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/07/07 11:1 a.m.33 views

CVE-2026-11340 Authorization Bypass in HAVELSAN's Open Source Project Liman MYS

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: before release.Master.1107...

8.3CVSS0.00195EPSS
Exploits0References1
EUVD
EUVD
added 2026/07/07 11:1 a.m.10 views

EUVD-2026-42033

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: before release.Master.1107...

8.3CVSS5.9AI score0.00195EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/07 11:1 a.m.12 views

CVE-2026-11340

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: before release.Master.1107...

8.3CVSS5.9AI score0.00195EPSS
Exploits0References2
NVD
NVD
added 2026/01/29 3:16 p.m.21 views

CVE-2020-37007

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

5.3CVSS0.00162EPSS
Exploits1References3
OSV
OSV
added 2026/01/29 3:16 p.m.5 views

CVE-2020-37007

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

4.3CVSS5.7AI score0.00162EPSS
Exploits1References3
CVE
CVE
added 2026/01/29 2:28 p.m.13 views

CVE-2020-37007

CVE-2020-37007 concerns Liman 0.7 and describes a cross-site request forgery (CSRF) vulnerability that lets an attacker manipulate user account settings by tricking an authenticated user into submitting unauthorized requests. The underlying issue is improper request validation in the change-passw...

5.3CVSS5.8AI score0.00162EPSS
Exploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/29 2:28 p.m.6 views

CVE-2020-37007

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

5.3CVSS5.8AI score0.00162EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2026/01/29 2:28 p.m.37 views

CVE-2020-37007 Liman 0.7 - Cross-Site Request Forgery (Change Password)

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

5.3CVSS0.00162EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/01/29 2:28 p.m.3 views

CVE-2020-37007 Liman 0.7 - Cross-Site Request Forgery (Change Password)

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

5.3CVSS5.8AI score0.00162EPSS
Exploits1References3
Rows per page
Query Builder