Lucene search
+L

13800 matches found

attackerkb
attackerkb
•added 2026/04/16 4:45 a.m.•11 views

CVE-2026-22615

Due to improper input validation in one of the Eaton Intelligent Power Protector IPP XML, it is possible for an attacker with admin privileges and access to the local system to inject malicious code resulting in arbitrary command execution. This security issue has been fixed in the latest version...

6CVSS5.9AI score0.00342EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/16 4:45 a.m.•46 views

CVE-2026-22615

CVE-2026-22615 affects Eaton Intelligent Power Protector (IPP) XML parsing due to improper input validation. An attacker with admin privileges and local access can inject malicious code causing arbitrary command execution. The issue is fixed in the latest Eaton IPP software version available from...

7.2CVSS6AI score0.00342EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/16 4:45 a.m.•11 views

CVE-2026-22615

Due to improper input validation in one of the Eaton Intelligent Power Protector IPP XML, it is possible for an attacker with admin privileges and access to the local system to inject malicious code resulting in arbitrary command execution. This security issue has been fixed in the latest version...

6CVSS6AI score0.00342EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/04/16 12:00 a.m.•30 views

RHEL 8 : fence-agents (RHSA-2026:1240)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1240 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or...

8.9CVSS6.8AI score0.02922EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/16 12:00 a.m.•4 views

CVE-2026-22617: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

Eaton Intelligent Power Protector IPP uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on t...

7.4CVSS5.8AI score0.00169EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/16 12:00 a.m.•1 views

CVE-2026-22615: Improper Input Validation

Due to improper input validation in one of the Eaton Intelligent Power Protector IPP XML, it is possible for an attacker with admin privileges and access to the local system to inject malicious code resulting in arbitrary command execution. This security issue has been fixed in the latest version...

7.2CVSS5.9AI score0.00342EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/16 12:00 a.m.•22 views

Eaton Intelligent Power Protector 安全漏洞

Eaton Intelligent Power Protector is a power protection software developed by the American company Eaton. There is a security vulnerability in Eaton Intelligent Power Protector, which stems from incorrect security configurations. This vulnerability may expose users to web-based attacks...

7.1CVSS5.8AI score0.00233EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/16 12:00 a.m.•23 views

Eaton Intelligent Power Protector 安全漏洞

Eaton Intelligent Power Protector is a power protection software developed by Eaton, Inc. in the United States. The Eaton Intelligent Power Protector has a security vulnerability, which stems from the insecure library loading in executable files. This vulnerability may allow attackers with access...

9.9CVSS6AI score0.00324EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/16 12:00 a.m.•27 views

Eaton Intelligent Power Protector 安全漏洞

Eaton Intelligent Power Protector is a power protection software developed by the American company Eaton. There is a security vulnerability in Eaton Intelligent Power Protector, which stems from insecure cookie configurations. This vulnerability may allow network-based attackers to intercept...

7.4CVSS5.8AI score0.00169EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/16 12:00 a.m.•23 views

Eaton Intelligent Power Protector 安全漏洞

Eaton Intelligent Power Protector is a power protection software developed by the American company Eaton. There is a security vulnerability in Eaton Intelligent Power Protector, which stems from insufficient rate-limiting controls. This vulnerability may lead to repeated authentication attempts...

7.5CVSS5.8AI score0.00319EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/16 12:00 a.m.•26 views

Eaton Intelligent Power Protector 安全漏洞

Eaton Intelligent Power Protector is a power protection software developed by the American company Eaton. There is a security vulnerability in Eaton Intelligent Power Protector, which stems from improper XML input validation. This vulnerability could allow attackers with administrative privileges...

7.2CVSS6.1AI score0.00342EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/16 12:00 a.m.•27 views

PT-2026-33256

Due to improper input validation in one of the Eaton Intelligent Power Protector IPP XML, it is possible for an attacker with admin privileges and access to the local system to inject malicious code resulting in arbitrary command execution. This security issue has been fixed in the latest version...

6CVSS5.9AI score0.00342EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/16 12:00 a.m.•4 views

CVE-2026-22616: Improper Restriction of Excessive Authentication Attempts

Eaton Intelligent Power Protector IPP software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting controls. This security issue has been fixed in the latest version of Eaton IPP which is available on the Eaton download centre...

7.5CVSS5.8AI score0.00319EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/16 12:00 a.m.•5 views

CVE-2026-22619: Uncontrolled Search Path Element

Eaton Intelligent Power Protector IPP is affected by insecure library loading in its executable, which could lead to arbitrary code execution by an attacker with access to the software package. This security issue has been fixed in the latest version of Eaton IPP software which is available on th...

9.9CVSS6.3AI score0.00324EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/16 12:00 a.m.•7 views

CVE-2026-22618: Improperly Implemented Security Check for Standard

A security misconfiguration was identified in Eaton Intelligent Power Protector IPP, where an HTTP response header was set with an insecure attribute, potentially exposing users to web‑based attacks. This security issue has been fixed in the latest version of Eaton IPP software which is available...

7.1CVSS5.7AI score0.00233EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/16 12:00 a.m.•22 views

PT-2026-33261

Eaton Intelligent Power Protector IPP is affected by insecure library loading in its executable, which could lead to arbitrary code execution by an attacker with access to the software package. This security issue has been fixed in the latest version of Eaton IPP software which is available on th...

7.8CVSS6.3AI score0.00324EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/04/16 12:00 a.m.•15 views

The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power supplies is related to errors in processing input data, allowing a intruder to compromise the integrity of the protected information.

The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power sources is related to errors in processing input data. Exploiting this vulnerability allows an attacker to influence the integrity of protected information by sending specially crafted POST requests...

4.3CVSS5.8AI score0.0017EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/16 12:00 a.m.•23 views

PT-2026-33257

Eaton Intelligent Power Protector IPP software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting controls. This security issue has been fixed in the latest version of Eaton IPP which is available on the Eaton download centre...

6.5CVSS5.7AI score0.00319EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/04/16 12:00 a.m.•18 views

The vulnerability of the Microsoft Power Apps development environment, related to the lack of measures to neutralize specific elements, allows a perpetrator to circumvent security restrictions.

The vulnerability of the Microsoft Power Apps development environment is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

9CVSS5.7AI score0.00768EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2026/04/15 7:23 p.m.•18 views

CVE-2026-26149

Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network...

9CVSS6.2AI score0.00768EPSS
SaveExploits0References1
Rows per page
Query Builder