Lucene search
+L

4823 matches found

OSV
OSV
added 2026/02/24 9:16 p.m.10 views

CVE-2026-24443

EventSentry versions prior to 6.0.1.20 contain an unverified password change vulnerability in the account management functionality of the Web Reports interface. The password change mechanism does not require validation of the current password before allowing a new password to be set. An attacker...

8.8CVSS5.8AI score0.00463EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/24 9:16 p.m.14 views

CVE-2026-24443

EventSentry versions prior to 6.0.1.20 contain an unverified password change vulnerability in the account management functionality of the Web Reports interface. The password change mechanism does not require validation of the current password before allowing a new password to be set. An attacker...

8.8CVSS0.00463EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/24 8:14 p.m.25 views

CVE-2026-24443

EventSentry

8.8CVSS5.5AI score0.00463EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/24 8:14 p.m.7 views

CVE-2026-24443 EventSentry < 6.0.1.20 Web Reports Unverified Password Change

EventSentry versions prior to 6.0.1.20 contain an unverified password change vulnerability in the account management functionality of the Web Reports interface. The password change mechanism does not require validation of the current password before allowing a new password to be set. An attacker...

8.6CVSS5.5AI score0.00463EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/24 8:14 p.m.5 views

CVE-2026-24443

EventSentry versions prior to 6.0.1.20 contain an unverified password change vulnerability in the account management functionality of the Web Reports interface. The password change mechanism does not require validation of the current password before allowing a new password to be set. An attacker...

8.8CVSS5.9AI score0.00463EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/02/24 8:14 p.m.29 views

CVE-2026-24443 EventSentry < 6.0.1.20 Web Reports Unverified Password Change

EventSentry versions prior to 6.0.1.20 contain an unverified password change vulnerability in the account management functionality of the Web Reports interface. The password change mechanism does not require validation of the current password before allowing a new password to be set. An attacker...

8.6CVSS0.00463EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/02/24 5:03 p.m.14 views

Important: Red Hat Security Advisory: Cost Management Metrics Operator Update

Cost Management Metrics Operator version 4.3.1 release. The Cost Management Metrics Operator is a component of the Red Hat Cost Managment service for Openshift. The operator runs on the latest supported versions of Openshift. This operator obtains OpenShift usage data by querying Prometheus every...

9.8CVSS7AI score0.48211EPSS
SaveExploits9References18
Positive Technologies
Positive Technologies
added 2026/02/24 12:00 a.m.13 views

PT-2026-21798

Name of the Vulnerable Software and Affected Versions EventSentry versions prior to 6.0.1.20 Description EventSentry has a flaw where passwords can be changed without verifying the current password through the account management functionality within the Web Reports interface. An attacker gaining...

8.6CVSS5.2AI score0.00463EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/02/24 12:00 a.m.19 views

NETIKUS EventSentry 安全漏洞

NETIKUS EventSentry is a network monitoring software developed by the American company NETIKUS. Versions of NETIKUS EventSentry prior to 6.0.1.20 contained security vulnerabilities. These vulnerabilities stemmed from the unvalidated password change mechanism in the account management feature of t...

8.8CVSS5.8AI score0.00463EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/02/22 5:30 a.m.168 views

KAVACHx

Intelligent Exploit & Patch Management Platform A full-stack...

5.6AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/02/22 2:06 a.m.182 views

SME-App-exe-

!PyQ...

5.5AI score
SaveExploits0
CNNVD
CNNVD
added 2026/02/21 12:00 a.m.38 views

Apache Airflow 安全漏洞

Apache Airflow is an open-source platform developed by the Apache Foundation in the United States. It allows for the creation, management, and monitoring of workflows. This platform features scalability and dynamic monitoring capabilities. Versions of Apache Airflow prior to 3.1.4 and 2.11.1...

6.5CVSS5.8AI score0.00801EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2026/02/14 8:09 p.m.277 views

Exploit for Improper Access Control in Joomla Joomla\!

🚨 MegaScanner — Ethical Web Vulnerability Mega Scanner v2.0...

5.3CVSS6.9AI score0.99827EPSS
SaveExploits43
GithubExploit
GithubExploit
added 2026/02/12 1:16 p.m.203 views

Pentora

Pentora v1.0 Pentora is a terminal-first web vulnerability...

5.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/02/12 12:00 a.m.8 views

GitLab 13.7 < 18.4.5 / 18.5 < 18.5.3 / 18.6 < 18.6.1 (CVE-2025-6195)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 13.7 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an authenticated user to view information...

4.3CVSS5.7AI score0.00321EPSS
SaveExploits0References5
Packet Storm News
Packet Storm News
added 2026/02/11 12:00 a.m.10 views

TRACE: Timely Retrieval and Alignment for Cybersecurity Knowledge Graph Construction and Expansion

The rapid evolution of cyber threats has highlighted significant gaps in security knowledge integration. Cybersecurity Knowledge Graphs CKGs relying on structured data inherently exhibit hysteresis, as the timely incorporation of rapidly evolving unstructured data remains limited, potentially...

5.7AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/02/10 11:37 a.m.227 views

creepytrix

🔒 CREEPYTRIX - Bitrix Pentest Tool v1.1 !Versionhttps://i...

6.5AI score
SaveExploits0
Fedora
Fedora
added 2026/02/10 1:34 a.m.15 views

[SECURITY] Fedora 43 Update: rust-resctl-bench-2.2.5-10.fc43

resctl-bench is a collection of whole-system benchmarks to evaluate resource control and hardware behaviors using realistic simulated workloads. Comprehensive resource control involves the whole system. Furthermore, testing resource control end-to-end requires scenarios involving realistic...

7.5CVSS5.5AI score0.00443EPSS
SaveExploits1
Packet Storm News
Packet Storm News
added 2026/02/10 12:00 a.m.8 views

FreeBSD Security Advisory - FreeBSD-SA-26:03.blocklistd

FreeBSD Security Advisory - Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives. Once a certain number of leaked sockets is reached, blocklistd becomes unable to run the helper script: a child process is forked, but this child dereferences a...

5.5AI score0.00359EPSS
SaveExploits0
NVD
NVD
added 2026/02/06 3:15 a.m.11 views

CVE-2026-1975

A security flaw has been discovered in Free5GC up to 4.1.0. This impacts the function identityTriggerType of the file pfcpreports.go. The manipulation results in null pointer dereference. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks...

7.5CVSS0.00526EPSS
SaveExploits1References7
Rows per page
Query Builder