Lucene search
K

37452 matches found

EUVD
EUVD
added 2026/04/14 3:30 p.m.2 views

EUVD-2026-22278

Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled...

5.7CVSS5.8AI score0.00126EPSS
Exploits0References2
NVD
NVD
added 2026/04/14 3:16 p.m.3 views

CVE-2026-4913

Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled...

5.7CVSS0.00126EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/14 2:10 p.m.20 views

CVE-2026-4913

Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled...

5.7CVSS0.00126EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/14 2:10 p.m.3 views

CVE-2026-4913

Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled...

5.7CVSS5.8AI score0.00126EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.2 views

Windows Shell Security Feature Bypass Vulnerability

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

8.8CVSS5.8AI score0.00094EPSS
Exploits0
Microsoft KB
Microsoft KB
added 2026/04/14 2:0 p.m.5 views

April 14, 2026—KB5082123 (OS Build 17763.8644)

April 14, 2026—KB5082123 OS Build 17763.8644 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated ...

8.8CVSS5.8AI score0.00565EPSS
Exploits5
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.3 views

Windows Shell Spoofing Vulnerability

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

4.3CVSS6.2AI score0.56822EPSS
Exploits3
Wiz blog
Wiz blog
added 2026/04/14 1:0 p.m.3 views

Securing the AI Edge: Wiz and Cloudflare Integrate for End-to-End AI Protection

Gain a unified view of AI application endpoints and DNS exposure across your environment, including which are protected by Cloudflare and which need to be secured...

5.8AI score
Exploits0
Github Security Blog
Github Security Blog
added 2026/04/14 12:31 p.m.7 views

MCPHub has an authentication bypass

MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privileges...

5.3CVSS5.8AI score0.00246EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.1 views

PT-2026-32854

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to April 2026 Description A protection mechanism failure in the Windows Shell allows an unauthorized remote attacker to perform spoofing. The issue occurs because Windows Explorer automatically attempts to fetc...

5CVSS5.9AI score0.56822EPSS
Exploits3References175
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.4 views

KB5082142: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (April 2026)

The remote Windows host is missing security update 5082142. It is, therefore, affected by multiple vulnerabilities - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. CVE-2026-33824 - Protection mechanism failure in Windows Shell allows an...

9.8CVSS7.4AI score0.56822EPSS
Exploits12References116
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.3 views

Fortinet FortiSandbox 安全漏洞

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection device developed by the American company Fortinet. This device offers features such as dual sandbox technology, dynamic threat intelligence systems, a real-time control panel, and reporting capabilities. There are security...

2.7CVSS5.8AI score0.00037EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.2 views

Ivanti Neurons for ITSM 安全漏洞

Ivanti Neurons for ITSM is a reliable and powerful IT service management solution from the American company Ivanti. Versions of Ivanti Neurons for ITSM prior to 2025.4 contained security vulnerabilities. These vulnerabilities stemmed from improper protection of alternative paths, which could allo...

5.7CVSS5.8AI score0.00126EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.4 views

KB5083768: Windows 11 Version 26H1 Security Update (April 2026)

The remote Windows host is missing security update 5083768. It is, therefore, affected by multiple vulnerabilities - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. CVE-2026-33824 - Protection mechanism failure in Windows Shell allows an...

9.8CVSS7.4AI score0.56822EPSS
Exploits12References119
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.3 views

KB5082198: Windows 10 Version 1607 / Windows Server 2016 Security Update (April 2026)

The remote Windows host is missing security update 5082198. It is, therefore, affected by multiple vulnerabilities - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. CVE-2026-33824 - Protection mechanism failure in Windows Shell allows an...

9.8CVSS7.4AI score0.56822EPSS
Exploits12References87
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.3 views

PT-2026-33356

Name of the Vulnerable Software and Affected Versions IOMMU affected versions not specified Description Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks,...

5.6CVSS6.6AI score0.00019EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.0 views

PT-2026-32837

CVE-2026-32171 Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network. https://t.co/kY4zlAhYAl...

8.8CVSS6.2AI score0.00082EPSS
Exploits0References3
VulnCheck KEV
VulnCheck KEV
added 2026/04/14 12:0 a.m.9 views

VulnCheck KEV: CVE-2026-32202

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

4.3CVSS5.1AI score0.56822EPSS
In wildExploits3References4
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.1 views

KB5082123: Windows 10 version 1809 / Windows Server 2019 Security Update (April 2026)

The remote Windows host is missing security update 5082123. It is, therefore, affected by multiple vulnerabilities - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. CVE-2026-33824 - Protection mechanism failure in Windows Shell allows an...

9.8CVSS7.4AI score0.56822EPSS
Exploits12References107
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.1 views

PT-2026-32868

CVE-2026-32225 Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. https://t.co/quolUhDQ1c...

8.8CVSS6.2AI score0.00094EPSS
Exploits0References3
Rows per page
Query Builder