Lucene search
+L

71 matches found

OSV
OSV
added 2026/03/05 3:38 p.m.7 views

CVE-2026-30798 RustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payload

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS5.9AI score0.00288EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.35 views

RustDesk 安全漏洞

RustDesk is a remote access and control software developed by RustDesk personal developers. It is primarily written in Rust and can be used to maintain computers and other devices remotely. Versions of RustDesk 1.4.5 and earlier contain security vulnerabilities. These vulnerabilities stem from...

8.2CVSS5.8AI score0.00288EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.25 views

PT-2026-23463

Name of the Vulnerable Software and Affected Versions RustDesk Client versions through 1.4.5 Description A flaw exists in RustDesk Client related to insufficient verification of data authenticity and improper handling of exceptional conditions, specifically allowing protocol manipulation. The iss...

8.2CVSS5.9AI score0.00288EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
added 2026/01/26 3:10 p.m.9 views

CVE-2026-22585

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud...

9.8CVSS5.9AI score0.0043EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/24 1:15 a.m.14 views

CVE-2026-22585

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud...

9.8CVSS5.8AI score0.0043EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/24 1:15 a.m.14 views

CVE-2026-22585

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud...

9.8CVSS0.0043EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/24 1:15 a.m.13 views

CVE-2026-22586

Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January...

9.8CVSS0.00613EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/24 1:15 a.m.15 views

CVE-2026-22583

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Salesforce Marketing Cloud Engagement CloudPagesUrl module allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026...

9.8CVSS0.00659EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/24 12:20 a.m.40 views

CVE-2026-22583

Salesforce Marketing Cloud Engagement (CloudPagesUrl module) is affected by CVE-2026-22583 due to improper neutralization of argument delimiters, enabling potential argument injection and Web Services Protocol Manipulation. The issue affects Marketing Cloud Engagement versions prior to January 21...

9.8CVSS5.4AI score0.00659EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/24 12:19 a.m.7 views

CVE-2026-22582

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Salesforce Marketing Cloud Engagement MicrositeUrl module allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026...

9.8CVSS5.9AI score0.00659EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/24 12:17 a.m.42 views

CVE-2026-22586

The CVE-2026-22586 entry concerns Salesforce Marketing Cloud Engagement, specifically modules such as CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, and View As Webpage. The root cause is a hard-coded cryptographic key that enables Web Services Protocol Manipu...

9.8CVSS5.4AI score0.00613EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/24 12:17 a.m.4 views

CVE-2026-22586

Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January...

9.8CVSS5.9AI score0.00613EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/24 12:15 a.m.37 views

CVE-2026-22585

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud...

0.0043EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/24 12:0 a.m.11 views

Salesforce Marketing Cloud Engagement security vulnerability

Salesforce Marketing Cloud Engagement is a digital marketing automation platform offered by the American company Salesforce. Versions of Salesforce Marketing Cloud Engagement prior to version 2026.1.21 contained security vulnerabilities. These vulnerabilities stemmed from the use of defective or...

9.8CVSS5.7AI score0.0043EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/24 12:0 a.m.15 views

PT-2026-4543

Name of the Vulnerable Software and Affected Versions Salesforce Marketing Cloud Engagement versions prior to January 21st, 2026 Description A hard-coded cryptographic key in the CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, and View As Webpage modules allows...

9.8CVSS5.8AI score0.00613EPSS
SaveExploits0References13
RedhatCVE
RedhatCVE
added 2025/10/29 7:16 p.m.8 views

CVE-2025-12423

Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

10CVSS6.8AI score0.00312EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/28 9:30 p.m.6 views

EUVD-2025-36554

Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

10CVSS6.3AI score0.00312EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/28 7:15 p.m.8 views

CVE-2025-12423

Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

10CVSS0.00312EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/28 6:14 p.m.19 views

CVE-2025-12423

The CVE-2025-12423 vulnerability affects Azure Access Technology BLU-IC2 and BLU-IC4 (versions up to 1.19.5). The root cause described across connected sources is a protocol operation leading to an uncaught exception, which can cause a Denial of Service (availability impact). Reported impact is a...

10CVSS6.4AI score0.00312EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/28 6:14 p.m.11 views

CVE-2025-12423 Denial of Service - Protocol Manipulation

Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

10CVSS6.4AI score0.00312EPSS
SaveExploits0References1
Rows per page
Query Builder