Lucene search
+L

8 matches found

EUVD
EUVD
added 2026/09/17 9:19 a.m.8 views

EUVD-2026-81412

For users authenticated through SAML or OpenID Connect OIDC, this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently...

8CVSS0.00338EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-88017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.0 until 1.75.1, the FTP auth-proxy drive...

7.3CVSS5.8AI score0.00234EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/10 4:18 p.m.8 views

DEBIAN-CVE-2026-88017

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.0 until 1.75.1, the FTP auth-proxy driver in cmd/serve/ftp/ftp.go stores one obscured password per username in the server-wide userPass mapstringstring instead of binding the...

7.3CVSS5.8AI score0.00234EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 3:55 p.m.46 views

CVE-2026-88017 rclone: FTP cross-session auth-proxy backend confusion

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.0 until 1.75.1, the FTP auth-proxy driver in cmd/serve/ftp/ftp.go stores one obscured password per username in the server-wide userPass mapstringstring instead of binding the...

7.3CVSS0.00234EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/10 3:55 p.m.9 views

CVE-2026-88017 rclone: FTP cross-session auth-proxy backend confusion

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.0 until 1.75.1, the FTP auth-proxy driver in cmd/serve/ftp/ftp.go stores one obscured password per username in the server-wide userPass mapstringstring instead of binding the...

7.3CVSS5.8AI score
SaveExploits0References5
CVE
CVE
added 2026/08/15 10:38 a.m.66 views

CVE-2026-73631

Apache Struts 7.2.1's JSON plugin shares per-request parsing state across concurrent requests, allowing one user's JSON-parsed data to leak into another's session and bypassing configured parsing limits. Affected deployments are those using JSON request body population. Upgrade to Struts 7.3.0. N...

4.3CVSS5.3AI score0.00262EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2026/03/23 12:00 a.m.20 views

Citrix NetScaler ADC和Citrix NetScaler Gateway 安全漏洞

Citrix NetScaler ADC and Citrix NetScaler Gateway are both products of the American company Citrix. Citrix NetScaler ADC is an application delivery and security platform. Citrix NetScaler Gateway is a solution for secure remote access. Both Citrix NetScaler ADC and Citrix NetScaler Gateway have...

7.7CVSS6.1AI score0.03618EPSS
SaveExploits0References1
Veracode
Veracode
added 2024/12/30 10:18 a.m.19 views

Improper Authentication

AsyncHttpClient AHC is vulnerable to Improper Authentication. The vulnerability is due to improper management of the CookieStore, which silently replaces explicitly defined cookies with those from the cookie jar if they share the same name, potentially leading to user session confusion in...

9.2CVSS6.6AI score0.00583EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder