Lucene search
+L

4644 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/04 12:00 a.m.•8 views

CVE-2026-23624: Session Fixation

GLPI is a free asset and IT management software package. In versions starting from 0.71 to before 10.0.23 and before 11.0.5, when remote authentication is used, based on SSO variables, a user can steal a GLPI session previously opened by another user on the same machine. This issue has been patch...

6.5CVSS6.5AI score0.00433EPSS
SaveExploits0References1
F5 Networks
F5 Networks
•added 2026/02/03 4:54 p.m.•27 views

K000159869: Telnetd vulnerability CVE-2026-24061

Security Advisory Description Telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable. CVE-2026-24061 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product...

9.8CVSS8.3AI score0.98984EPSS
SaveExploits69
RedhatCVE
RedhatCVE
•added 2026/02/03 3:11 a.m.•24 views

CVE-2026-1740

A vulnerability was found in EFM ipTIME A8004T 14.18.2. This impacts the function httpconchecksessionurl of the file /cgi/timepro.cgi of the component Hidden Hiddenloginsetup Interface. The manipulation results in improper authentication. The attack may be performed from remote. The exploit has...

9.8CVSS5AI score0.00555EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2026/02/03 12:00 a.m.•13 views

Ubuntu: Security Advisory (USN-7992-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.6AI score0.98984EPSS
SaveExploits69References4
EUVD
EUVD
•added 2026/01/30 6:06 p.m.•21 views

EUVD-2025-206570

Insufficient epoch key slot processing in OpenVPN 2.7alpha1 through 2.7rc5 allows remote authenticated users to trigger an assert resulting in a denial of service...

7CVSS5.9AI score0.00363EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/30 6:06 p.m.•53 views

CVE-2025-15497

Insufficient epoch key slot processing in OpenVPN 2.7alpha1 through 2.7rc5 allows remote authenticated users to trigger an assert resulting in a denial of service...

7CVSS0.00363EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/30 6:04 a.m.•31 views

EUVD-2026-5043

An input neutralization vulnerability in the Backup Configuration component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal...

8.2CVSS6.3AI score0.00661EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/30 12:00 a.m.•19 views

GNU Inetutils telnetd Remote Authentication Bypass (CVE-2026-24061)

Binary data telnetdcve-2026-24061.nbin...

9.8CVSS8.6AI score0.98984EPSS
SaveExploits69References2
GithubExploit
GithubExploit
•added 2026/01/27 8:32 a.m.•300 views

Exploit for CVE-2026-24061

CVE-2026-24061 Vulnerability Scanner & Exploit !Licenseh...

9.8CVSS8.7AI score0.98984EPSS
SaveExploits107
ICS
ICS
•added 2026/01/27 12:00 a.m.•24 views

Hitachi Energy XMC20

SUMMARY Hitachi Energy is aware of a vulnerability that affects XMC20 product versions listed in this document. Successful exploitation of this vulnerability can lead to forgery attacks potentially causing impact on confidentiality, integrity and availability for the product. Please refer to the...

9CVSS7.7AI score0.14859EPSS
SaveExploits2References10
ICS
ICS
•added 2026/01/27 12:00 a.m.•30 views

Hitachi Energy FOX61x

SUMMARY Hitachi Energy is aware of a vulnerability that affects FOX61x product versions listed in this document. Successful exploitation of this vulnerability can lead to forgery attacks potentially causing impact on confidentiality, integrity and availability for the product. Please refer to...

9CVSS7.7AI score0.14859EPSS
SaveExploits2References10
CISA KEV Catalog
CISA KEV Catalog
•added 2026/01/26 12:00 a.m.•23 views

GNU InetUtils Argument Injection Vulnerability

GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable...

9.8CVSS8.6AI score0.98984EPSS
SaveIn wildExploits69
GithubExploit
GithubExploit
•added 2026/01/24 2:15 p.m.•215 views

Exploit for CVE-2026-24061

CVE-2026-24061 GNU Inetutils telnetd Remote Authentication...

9.8CVSS8.6AI score0.98984EPSS
SaveExploits69
GithubExploit
GithubExploit
•added 2026/01/23 5:26 p.m.•229 views

Exploit for CVE-2026-24061

CVE-2026-24061 GNU inetutils-telnetd - Remote Authenticati...

9.8CVSS9.2AI score0.98984EPSS
SaveExploits69
SUSE CVE
SUSE CVE
•added 2026/01/23 12:24 a.m.•17 views

SUSE CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

9.8CVSS8.5AI score0.98984EPSS
SaveExploits69References3
GithubExploit
GithubExploit
•added 2026/01/22 2:27 p.m.•206 views

Exploit for CVE-2026-24061

CVE-2026-24061 GNU inetutils-telnetd Remote Authentication By...

9.8CVSS8.8AI score0.98984EPSS
SaveExploits69
RedhatCVE
RedhatCVE
•added 2026/01/22 7:23 a.m.•16 views

CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

9.8CVSS8.6AI score0.98984EPSS
SaveExploits69References1
CNVD
CNVD
•added 2026/01/22 12:00 a.m.•35 views

GNU InetUtils Telnetd Remote Authentication Bypass Vulnerability

GNU InetUtils telnetd is a telnet service daemon in the GNU InetUtils suite that listens on TCP port 23 and provides clients with plaintext terminal access based on the Telnet protocol. A remote authentication bypass vulnerability exists in GNU InetUtils Telnetd, which can be exploited to bypass...

9.8CVSS8.5AI score0.98984EPSS
SaveExploits69References1
VulnCheck KEV
VulnCheck KEV
•added 2026/01/22 12:00 a.m.•35 views

VulnCheck KEV: CVE-2026-24061

GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable...

9.8CVSS8.6AI score0.98984EPSS
SaveIn wildExploits69References148
osv_cve
osv_cve
•added 2026/01/21 7:16 a.m.•15 views

CVE-2026-24061

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable...

9.8CVSS5.8AI score
SaveExploits0References13
Rows per page
Query Builder