Lucene search
+L

2059 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/01 12:00 a.m.•8 views

CVE-2026-79686: Protection Mechanism Failure

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges...

8.8CVSS6AI score0.00494EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/01 12:00 a.m.•4 views

CVE-2026-79684: Protection Mechanism Failure

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges...

8.8CVSS6AI score0.00494EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/01 12:00 a.m.•7 views

CVE-2026-79683: Protection Mechanism Failure

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to write attacker-controlled content to arbitrary filesystem paths...

8.8CVSS6.1AI score0.0049EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•26 views

PT-2026-84208

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description A protection mechanism failure allows an authenticated user with limited privileges to write attacker-controlled content to arbitrary filesystem paths. Recommendations At the moment,...

8.8CVSS5.8AI score0.0049EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•16 views

PT-2026-84226

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description A protection mechanism failure allows an authenticated user with limited privileges to bypass access restrictions and gain escalated privileges. Recommendations At the moment, there i...

8.8CVSS5.7AI score0.00494EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•20 views

PT-2026-84250

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description A protection mechanism failure allows an authenticated user with limited privileges to bypass access restrictions and gain escalated privileges. Recommendations At the moment, there i...

8.8CVSS5.7AI score0.00494EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2026/08/28 2:00 p.m.•68 views

Chromium: CVE-2026-79006 Protection mechanism failure in HttpsUpgrades

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS5.7AI score0.00246EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2026/08/27 7:19 p.m.•13 views

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in DOMPurify

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in DOMPurify. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-65898 DESCRIPTION: DOMPurify before 3.4.11 fails to clone the ALLOWEDATTR allowlist when setConfig is...

7.2CVSS6.3AI score0.00413EPSS
SaveExploits7Affected Software1
SUSE CVE
SUSE CVE
•added 2026/08/27 12:18 a.m.•9 views

SUSE CVE-2026-79006

Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

4.3CVSS5.9AI score0.00246EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/27 12:00 a.m.•6 views

CVE-2026-59277: Protection Mechanism Failure

Spring Security's InetAddressMatchers utility provides matchInternal and matchExternal builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal private or external public network. Spring Security 7.1.0...

5.3CVSS5.8AI score0.00288EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/08/26 9:23 a.m.•9 views

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed multiple vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-22016 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks o...

7.5CVSS6.2AI score0.00702EPSS
SaveExploits1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/26 12:00 a.m.•6 views

CVE-2026-74774: Improper Certificate Validation

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

7.5CVSS5.9AI score0.00216EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-79006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network...

4.3CVSS6.4AI score0.00246EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/26 12:00 a.m.•6 views

CVE-2026-80198: Protection Mechanism Failure

Kimai versions before 2.56.0 fail to restrict the config Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind...

8.7CVSS5.9AI score0.00432EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/25 9:17 p.m.•11 views

CVE-2026-79006

Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

4.3CVSS0.00246EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/08/25 9:17 p.m.•11 views

CVE-2026-79006

Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

4.3CVSS5.4AI score0.00246EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/25 8:10 p.m.•186 views

CVE-2026-79006

Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

4.3CVSS5.8AI score0.00246EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/08/25 8:10 p.m.•51 views

CVE-2026-79006

Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

0.00246EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/25 8:10 p.m.•11 views

EUVD-2026-65870

Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

5.2AI score0.00246EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/08/25 8:10 p.m.•19 views

CVE-2026-79006

Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

4.3CVSS5.8AI score0.00246EPSS
SaveExploits0
Rows per page
Query Builder