Lucene search
+L

233149 matches found

OSV
OSV
added 2026/06/05 5:56 p.m.9 views

CVE-2026-45743 Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR)

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. 16 file-manager endpoints in Termix prior to version 2.3.2 do not verify that the requesting user owns the SSH session identified by sessionId. An authenticated attacker who knows or...

8.1CVSS6AI score
SaveExploits0References4
CVE
CVE
added 2026/06/05 5:56 p.m.39 views

CVE-2026-45743

Termix before 2.3.2 has an IDOR flaw in 16 file-manager endpoints where the server fails to verify that the requester owns the SSH session identified by sessionId. An authenticated user who can guess another user’s active sessionId can read, write, delete, download, and execute files on the victi...

8.1CVSS5.6AI score0.00282EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/05 5:56 p.m.13 views

CVE-2026-45743 Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR)

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. 16 file-manager endpoints in Termix prior to version 2.3.2 do not verify that the requesting user owns the SSH session identified by sessionId. An authenticated attacker who knows or...

8.1CVSS5.6AI score0.00282EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/06/05 5:56 p.m.44 views

CVE-2026-45743 Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR)

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. 16 file-manager endpoints in Termix prior to version 2.3.2 do not verify that the requesting user owns the SSH session identified by sessionId. An authenticated attacker who knows or...

8.1CVSS0.00282EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/06/05 5:56 p.m.24 views

EUVD-2026-34872

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. 16 file-manager endpoints in Termix prior to version 2.3.2 do not verify that the requesting user owns the SSH session identified by sessionId. An authenticated attacker who knows or...

8.1CVSS5.6AI score0.00282EPSS
SaveExploits1References2
Microsoft CVE
Microsoft CVE
added 2026/06/05 2:0 p.m.17 views

Chromium: CVE-2026-11251 Insufficient validation of untrusted input in Password Manager

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

3.1CVSS5.4AI score0.00186EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/06/05 2:0 p.m.18 views

Chromium: CVE-2026-11193 Insufficient policy enforcement in Password Manager

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS5.4AI score0.00216EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/06/05 2:0 p.m.16 views

Chromium: CVE-2026-11032 Insufficient data validation in Password Manager

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS5.4AI score0.00176EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/06/05 2:0 p.m.15 views

Chromium: CVE-2026-11192 Insufficient validation of untrusted input in Password Manager

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS5.4AI score0.00176EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/06/05 2:0 p.m.20 views

Chromium: CVE-2026-11031 Insufficient validation of untrusted input in Password Manager

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS5.4AI score0.00203EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/06/05 2:0 p.m.17 views

Chromium: CVE-2026-11084 Inappropriate implementation in Password Manager

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS5.4AI score0.00176EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/06/05 2:0 p.m.16 views

Chromium: CVE-2026-11083 Inappropriate implementation in Password Manager

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS5.4AI score0.00176EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/06/05 2:0 p.m.14 views

Chromium: CVE-2026-11011 Insufficient policy enforcement in Password Manager

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.1CVSS5.4AI score0.0031EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/06/05 2:0 p.m.19 views

Chromium: CVE-2026-11049 Use after free in Password Manager

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS5.4AI score0.0028EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/06/05 2:0 p.m.17 views

Chromium: CVE-2026-11151 Insufficient validation of untrusted input in Password Manager

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

7.5CVSS5.4AI score0.00221EPSS
SaveExploits0
OSV
OSV
added 2026/06/05 1:57 p.m.6 views

SUSE-SU-2026:22086-1 Security update for NetworkManager

This update for NetworkManager fixes the following issues: Security fixes: - CVE-2025-9615: Fixed non-admin user using others' certificates bsc1257359. Other fixes: - Accept localhost hostnames if static bsc1257366...

3.3CVSS5.2AI score0.00162EPSS
SaveExploits0References4
OSV
OSV
added 2026/06/05 1:54 p.m.11 views

OPENSUSE-SU-2026:20911-1 Security update for NetworkManager

This update for NetworkManager fixes the following issues: Security fixes: - CVE-2025-9615: Fixed non-admin user using others' certificates bsc1257359. Other fixes: - Accept localhost hostnames if static bsc1257366...

3.3CVSS5.2AI score0.00162EPSS
SaveExploits0References3
CBLMariner
CBLMariner
added 2026/06/05 12:59 p.m.18 views

CVE-2026-33814 affecting package cert-manager for versions less than 1.12.15-9

CVE-2026-33814 affecting package cert-manager for versions less than 1.12.15-9. A patched version of the package is available...

7.5CVSS5.4AI score0.00781EPSS
SaveExploits0
NCSC
NCSC
added 2026/06/05 9:38 a.m.21 views

Kwetsbaarheid verholpen in Cisco SD-WAN Manager

Cisco has identified a vulnerability in SD-WAN Manager, previously known as SD-WAN vManage. A malicious individual could exploit this vulnerability by uploading a specially crafted file to the affected system and thereby elevating their privileges to root user status. Cisco indicates that active...

7.8CVSS5.5AI score0.25323EPSS
SaveExploits2References1
Patchstack
Patchstack
added 2026/06/05 9:37 a.m.21 views

WordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by endy in WordPress Plugin WP User Manager versions = 2.9.16...

9.9CVSS5.5AI score0.00506EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder