Lucene search
+L

57 matches found

Cvelist
Cvelist
added 2026/07/07 11:11 a.m.44 views

CVE-2026-11348 Authentication Bypass in HAVELSAN's Open Source Project Liman MYS

Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows Fake the Source of Data. This issue affects Liman MYS: before release.Master.1107...

8.1CVSS0.00254EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/07 11:11 a.m.34 views

CVE-2026-11348

The CVE-2026-11348 vulnerability affects HAVELSAN Liman MYS (before release.Master.1107) and is caused by improper verification of a cryptographic signature. The entry indicates a remote attack vector (Network) with high impact across confidentiality, integrity, and availability (CVSS v3.1: 8.1, ...

8.1CVSS5.9AI score0.00254EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/07 11:11 a.m.13 views

CVE-2026-11348

Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows Fake the Source of Data. This issue affects Liman MYS: before release.Master.1107...

8.1CVSS5.9AI score0.00254EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/07 11:01 a.m.28 views

EUVD-2026-42033

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: before release.Master.1107...

8.3CVSS5.9AI score0.0035EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/07 11:01 a.m.50 views

CVE-2026-11340

CVE-2026-11340 describes a Missing Authorization vulnerability in HAVELSAN’s Liman MYS prior to release.Master.1107, where functionality is accessible without proper ACL constraints. Core issue: access to certain features is not properly constrained by ACLs, enabling unauthorized access. Accordin...

8.3CVSS5.9AI score0.0035EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/07 11:01 a.m.46 views

CVE-2026-11340 Authorization Bypass in HAVELSAN's Open Source Project Liman MYS

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: before release.Master.1107...

8.3CVSS0.0035EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/07 11:01 a.m.18 views

CVE-2026-11340

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: before release.Master.1107...

8.3CVSS5.9AI score0.0035EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/29 3:16 p.m.10 views

CVE-2020-37007

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

4.3CVSS5.7AI score0.00172EPSS
SaveExploits1References3
NVD
NVD
added 2026/01/29 3:16 p.m.31 views

CVE-2020-37007

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

5.3CVSS0.00172EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/01/29 2:28 p.m.12 views

EUVD-2020-30902

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

5.3CVSS5.8AI score0.00172EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/01/29 2:28 p.m.48 views

CVE-2020-37007 Liman 0.7 - Cross-Site Request Forgery (Change Password)

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

5.3CVSS0.00172EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/01/29 2:28 p.m.5 views

CVE-2020-37007 Liman 0.7 - Cross-Site Request Forgery (Change Password)

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

5.3CVSS5.8AI score0.00172EPSS
SaveExploits1References3
CVE
CVE
added 2026/01/29 2:28 p.m.25 views

CVE-2020-37007

CVE-2020-37007 concerns Liman 0.7 and describes a cross-site request forgery (CSRF) vulnerability that lets an attacker manipulate user account settings by tricking an authenticated user into submitting unauthorized requests. The underlying issue is improper request validation in the change-passw...

5.3CVSS5.8AI score0.00172EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/29 2:28 p.m.7 views

CVE-2020-37007

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

5.3CVSS5.8AI score0.00172EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2026/01/29 12:00 a.m.16 views

Liman security vulnerabilities

Liman is an open-source application developed by Liman MYS. It allows for the remote and secure management of all servers, clients, and network devices within an organization. Version 0.7 of Liman contains a security vulnerability caused by insufficient request validation, which may lead to...

5.3CVSS5.7AI score0.00172EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/01/29 12:00 a.m.13 views

PT-2026-5282

Name of the Vulnerable Software and Affected Versions Liman version 0.7 Description The software contains a cross-site request forgery issue that allows attackers to manipulate user account settings without proper request validation. Attackers can create malicious HTML forms to change user...

5.3CVSS5.2AI score0.00172EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/01/07 9:18 a.m.25 views

CVE-2025-1269

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing. This issue affects Liman MYS: before 2.1.1 - 1010...

4.8CVSS5.5AI score0.00181EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2021-27095

Malware in sbrugna...

8.8CVSS8.6AI score0.01834EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2025-4799

Malicious code in bioql PyPI...

4.8CVSS6.5AI score0.00181EPSS
SaveExploits0References3
NVD
NVD
added 2025/02/18 2:15 p.m.22 views

CVE-2025-1269

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing. This issue affects Liman MYS: before 2.1.1 - 1010...

4.8CVSS0.00181EPSS
SaveExploits0References3
Rows per page
Query Builder