39939 matches found
CVE-2026-46369 Nimiq: Validity store off by one error
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparison that expires a stored transaction too early relative to Transaction::isvalidat, allowing a remote attacker to repl...
CVE-2026-46369
Nimiq (Rust implementation of the Nimiq Proof-of-Stake protocol, Albatross consensus) is affected by an off-by-one error in its validity store through version 1.5.0 . The store uses a strict lower-bound comparison that expires a stored transaction one block too early relative to Transaction::is_v...
CVE-2026-46369 Nimiq: Validity store off by one error
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparison that expires a stored transaction too early relative to Transaction::isvalidat, allowing a remote attacker to repl...
EUVD-2026-66674
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
CVE-2026-74770
Dell PowerProtect One (versions 20.1.0.0 and below ) is affected by an OS Command Injection vulnerability. A low-privileged remote attacker can exploit this flaw to achieve code execution , with a CVSS 3.1 score of 8.8 (HIGH) — reflecting network attack vector, low complexity, and high impact on ...
CVE-2026-74770
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
CVE-2026-74770
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
EUVD-2026-66672
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...
CVE-2026-74771
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...
CVE-2026-74771
Dell PowerProtect One versions 20.1.0.0 and below are affected by an Authorization Bypass Through User-Controlled Key vulnerability. A low-privileged attacker with remote network access could exploit this flaw to cause information tampering , with no user interaction required. The CVSS 3.1 base s...
CVE-2026-74771
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...
CVE-2026-74774
Dell PowerProtect One , versions 20.1.0.0 and below , contains an Improper Certificate Validation vulnerability that allows an unauthenticated remote attacker to bypass a protection mechanism. The NVD-assigned score is 7.5 (HIGH) with a network vector, low complexity, and no privileges required, ...
CVE-2026-74774
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...
CVE-2026-74774
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...
EUVD-2026-66670
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...
CVE-2026-67275
Dell PowerProtect One , versions 20.1.0.0 and below , is affected by a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this to achieve cache poisoning , resulting in a high integrity impact with no confidenti...
EUVD-2026-66669
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning...
CVE-2026-67275
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning...
CVE-2026-67275
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning...
CVE-2026-68861
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...