Lucene search
+L

13586 matches found

Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.18 views

PT-2026-44556

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216 Description A use after free issue in Passwords on Windows allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape. This is achieved through the u...

9.6CVSS5.8AI score0.00383EPSS
SaveExploits2References159
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.17 views

PT-2026-44560

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216 Description Insufficient validation of untrusted input in the Passwords component allows a remote attacker to perform UI spoofing by using a crafted HTML page. Recommendations Update to version...

9.6CVSS5.8AI score0.00368EPSS
SaveExploits5References157
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.26 views

PT-2026-43684

Name of the Vulnerable Software and Affected Versions IBM Operations Analytics - Log Analysis versions 1.3.5.0 through 1.3.5.3 IBM Operations Analytics - Log Analysis versions 1.3.6.0 through 1.3.6.1 IBM Operations Analytics - Log Analysis versions 1.3.7.0 through 1.3.7.2 IBM Operations Analytics...

9.8CVSS5.5AI score0.0036EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.19 views

IBM Operations Analytics - Log Analysis 安全漏洞

IBM Operations Analytics - Log Analysis is a log analysis software developed by the American multinational company International Business Machines IBM. There is a security vulnerability in IBM Operations Analytics - Log Analysis, which stems from the use of default passwords during the...

8.4CVSS5.8AI score0.00122EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.22 views

PT-2026-43983

Name of the Vulnerable Software and Affected Versions IBM Operations Analytics - Log Analysis affected versions not specified IBM SmartCloud Analytics - Log Analysis affected versions not specified Description These products use default passwords from the manufacturing process during the...

8.4CVSS5.8AI score0.00122EPSS
SaveExploits0References3
Akamai Blog
Akamai Blog
added 2026/05/26 6:00 p.m.16 views

Introducing Password-Less Provisioning and Atomic Customization for VMs

Akamai Cloud introduces password-less provisioning and atomic customization. Align with Zero Trust by eliminating root passwords and hardening VMs at creation...

5.8AI score
SaveExploits0
NVD
NVD
added 2026/05/26 5:16 p.m.20 views

CVE-2025-36221

IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication...

7.5CVSS0.00269EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/26 3:55 p.m.23 views

EUVD-2025-209932

IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication...

5.3CVSS5.8AI score0.00269EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/26 3:55 p.m.33 views

CVE-2025-36221

Summary: CVE-2025-36221 affects IBM Cloud Pak for Data System – Cyclops 11.3.0.2 with Interim Fix 002. The root cause is the use of default passwords from the manufacturing process during installation, which could allow an attacker to bypass authentication. Impact (as documented): Authentication ...

7.5CVSS5.8AI score0.00269EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/26 3:55 p.m.12 views

CVE-2025-36221

IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication...

5.3CVSS5.8AI score0.00269EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/26 3:55 p.m.12 views

CVE-2025-36221 Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.

IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication...

5.3CVSS5.8AI score0.00269EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/26 3:55 p.m.50 views

CVE-2025-36221 Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.

IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication...

5.3CVSS0.00269EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/26 12:00 a.m.29 views

PT-2026-43283

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Data System - Cyclops versions 11.3.0.2 through Interim Fix 002 Description IBM Cloud Pak for Data System uses default passwords from the manufacturing process during the installation process, which could allow an attacker to...

7.5CVSS5.8AI score0.00269EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/26 12:00 a.m.18 views

Eppendorf BioFlo 320 安全漏洞

The Eppendorf BioFlo 320 is a laboratory bioreactor control system developed by the German company Eppendorf. The Eppendorf BioFlo 320 has a security vulnerability, which stems from the VNC server using hard-coded passwords. This vulnerability could allow remote attackers to gain complete control...

9.8CVSS5.8AI score0.00498EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/25 2:15 p.m.14 views

CVE-2018-25362

Twitter-Clone 1 contains a SQL injection vulnerability in follow.php that allows attackers to manipulate database queries by injecting SQL code through the userid parameter. Attackers can submit union-based or time-based blind SQL injection payloads to extract sensitive database information...

8.8CVSS5.9AI score0.00309EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/05/25 2:15 p.m.16 views

EUVD-2018-21882

Twitter-Clone 1 contains a SQL injection vulnerability in follow.php that allows attackers to manipulate database queries by injecting SQL code through the userid parameter. Attackers can submit union-based or time-based blind SQL injection payloads to extract sensitive database information...

8.8CVSS5.9AI score0.00309EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.15 views

Soroush IM Desktop App 安全漏洞

Soroush IM Desktop App is a cross-platform instant messaging client from Soroush Iran. A security vulnerability exists in Soroush IM Desktop App version 0.17.0, which stems from an authentication bypass that could allow a local attacker to remove passwords by injecting database entries that are...

7CVSS5.8AI score0.00122EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/25 12:00 a.m.30 views

PT-2026-43215

Twitter-Clone 1 contains a SQL injection vulnerability in follow.php that allows attackers to manipulate database queries by injecting SQL code through the userid parameter. Attackers can submit union-based or time-based blind SQL injection payloads to extract sensitive database information...

8.8CVSS5.9AI score0.00309EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/24 8:16 p.m.31 views

CVE-2026-9394

A vulnerability was determined in Besen BS20 EV Charging Station up to 20260426. This impacts an unknown function of the component Bluetooth Low Energy Handler. Executing a manipulation can lead to weak password requirements. The attack needs to be done within the local network. This attack is...

3.1CVSS0.00192EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/24 7:30 p.m.20 views

CVE-2026-9394

A vulnerability was determined in Besen BS20 EV Charging Station up to 20260426. This impacts an unknown function of the component Bluetooth Low Energy Handler. Executing a manipulation can lead to weak password requirements. The attack needs to be done within the local network. This attack is...

3.1CVSS5.2AI score0.00192EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder