Lucene search
K

7 matches found

OSV
OSV
added 6 days ago5 views

UBUNTU-CVE-2026-50266

Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks...

2.2CVSS5.5AI score0.00038EPSS
Exploits0References5
EUVD
EUVD
added 2026/06/04 4:18 p.m.7 views

EUVD-2026-34301

In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set deviceowner to a value that has "network:" at the beginning "network:dhcp" for example. The default port RBAC policies incorrectly included PROJECTMANAGER without...

3.5CVSS7.1AI score0.00174EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2026/06/04 4:18 p.m.6 views

CVE-2026-50266

In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set deviceowner to a value that has "network:" at the beginning "network:dhcp" for example. The default port RBAC policies incorrectly included PROJECTMANAGER without...

2.2CVSS5.8AI score0.00038EPSS
Exploits0
CVE
CVE
added 2026/06/04 4:18 p.m.10 views

CVE-2026-50266

OpenStack Neutron before 28.0.1 is affected. A port on a shared network owned by another project can be created or updated by a project manager with device_owner starting with a network: prefix (e.g., network:dhcp). The default RBAC policies did not require network ownership, allowing access to t...

2.2CVSS5.8AI score0.00038EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/06/04 12:0 a.m.10 views

PT-2026-46270

In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device owner to a value that has "network:" at the beginning "network:dhcp" for example. The default port RBAC policies incorrectly included PROJECT MANAGER witho...

2.2CVSS5.8AI score0.00038EPSS
Exploits0References9
NVD
NVD
added 2025/09/19 7:15 p.m.3 views

CVE-2025-34201

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments run many Docker containers on shared internal networks without firewalling or segmentation between instances. A compromise of any single container allows direct access to internal services HTTP, Redi...

8.5CVSS0.00072EPSS
Exploits1References4
The Hacker News
The Hacker News
added 2014/02/25 8:33 p.m.11 views

New Apple vulnerability allows Malicious keylogger App to Record User Inputs

Yet another Apple vulnerability has been exposed by security researchers, that can be exploited to track your finger's every action on iOS Devices i.e. iPhone, iPad etc. The exploit reportedly targets a flaw in iOS multitasking capabilities to capture user inputs, according to Security researcher...

6.4AI score
Exploits0
Rows per page
Query Builder