Lucene search
+L

128 matches found

CNNVD
CNNVD
added 2026/05/21 12:0 a.m.12 views

Trend Micro TrendAI Vision One Endpoint Security - Standard Endpoint Protection 访问控制错误漏洞

Trend Micro TrendAI Vision One Endpoint Security – Standard Endpoint Protection is an enterprise endpoint security platform provided by Trend Micro that offers capabilities for detecting terminal threats, antivirus protection, and managing security policies. There are access control vulnerability...

7.8CVSS6.6AI score0.00213EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/05/21 12:0 a.m.13 views

Trend Micro Apex One和TrendAI Vision One Endpoint Security - Standard Endpoint Protection 访问控制错误漏洞

Trend Micro Apex One and TrendAI Vision One Endpoint Security – Standard Endpoint Protection are products of Trend Micro, a US-based company. Trend Micro Apex One is a terminal protection software. TrendAI Vision One Endpoint Security – Standard Endpoint Protection is an enterprise terminal...

7.8CVSS6.6AI score0.00246EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/21 12:0 a.m.12 views

Trend Micro Apex One和TrendAI Vision One Endpoint Security - Standard Endpoint Protection 访问控制错误漏洞

Trend Micro Apex One and TrendAI Vision One Endpoint Security – Standard Endpoint Protection are products of Trend Micro, a US-based company. Trend Micro Apex One is a terminal protection software. TrendAI Vision One Endpoint Security – Standard Endpoint Protection is an enterprise terminal...

7.8CVSS6.6AI score0.00213EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/21 12:0 a.m.22 views

Trend Micro Apex One和TrendAI Vision One Endpoint Security - Standard Endpoint Protection 访问控制错误漏洞

Trend Micro Apex One and TrendAI Vision One Endpoint Security – Standard Endpoint Protection are products of Trend Micro, a US-based company. Trend Micro Apex One is a terminal protection software. TrendAI Vision One Endpoint Security – Standard Endpoint Protection is an enterprise terminal...

7.8CVSS6.7AI score0.00213EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/21 12:0 a.m.19 views

Trend Micro Apex One和TrendAI Vision One Endpoint Security - Standard Endpoint Protection 访问控制错误漏洞

Trend Micro Apex One and TrendAI Vision One Endpoint Security – Standard Endpoint Protection are products of Trend Micro, a US-based company. Trend Micro Apex One is a terminal protection software. TrendAI Vision One Endpoint Security – Standard Endpoint Protection is an enterprise terminal...

7.8CVSS6.6AI score0.00213EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/21 12:0 a.m.18 views

Trend Micro Apex One 访问控制错误漏洞

Trend Micro Apex One is a terminal protection software developed by Trend Micro, a US-based company. Trend Micro Apex One has an access control vulnerability, which stems from a source verification error. This vulnerability may allow local attackers to gain elevated privileges...

7.8CVSS7.1AI score0.00337EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/17 9:31 p.m.8 views

EUVD-2026-23533

Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic...

8.1CVSS5.8AI score0.00231EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/17 8:16 p.m.8 views

CVE-2026-40434

Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic...

8.1CVSS0.00231EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/17 7:49 p.m.12 views

CVE-2026-40434 Anviz CrossChex Standard Improper Verification of Source of a Communication Channel

Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic...

8.1CVSS5.8AI score0.00231EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/17 7:49 p.m.34 views

CVE-2026-40434 Anviz CrossChex Standard Improper Verification of Source of a Communication Channel

Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic...

8.1CVSS0.00231EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/17 7:49 p.m.18 views

CVE-2026-40434

CVE-2026-40434 affects Anviz CrossChex Standard and is due to improper verification of the source of a communication channel, enabling an adjacent attacker on the same network to inject TCP packets and modify or disrupt client/server traffic. The documented impact is high (I/H, A/H) with no user ...

8.1CVSS5.8AI score0.00231EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/17 7:49 p.m.5 views

CVE-2026-40434

Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic...

8.1CVSS5.8AI score0.00231EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/04/17 12:0 a.m.14 views

Anviz CrossChex Standard 安全漏洞

Anviz CrossChex Standard is a centralized control software developed by Anviz Corporation in the United States, used for access control and attendance data management. Anviz CrossChex Standard has a security vulnerability. This vulnerability stems from the lack of source verification in the...

8.1CVSS5.8AI score0.00231EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/17 12:0 a.m.15 views

PT-2026-33503

Name of the Vulnerable Software and Affected Versions Anviz CrossChex Standard affected versions not specified Description The software lacks source verification in the client/server channel. This allows an attacker on the same network to perform TCP packet injection to alter or disrupt applicati...

8.1CVSS5.8AI score0.00231EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/04/09 12:0 a.m.14 views

Helm 安全漏洞

Helm is a Kubernetes package manager offered by the CNCF Foundation. Helm versions 4.1.3 and earlier contain security vulnerabilities, which stem from the installation of plugins without source verification when signature validation is required...

8.4CVSS5.8AI score0.0022EPSS
SaveExploits0References4
OSV
OSV
added 2026/02/23 4:16 a.m.18 views

UBUNTU-CVE-2026-2967

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/netbuiltin.c of the component TCP Sequence Number Handler. The manipulation leads to improper verification of source of a communication channel. The attack may be initiate...

6.3CVSS4.9AI score0.00491EPSS
SaveExploits1References7
Debian CVE
Debian CVE
added 2026/02/23 2:32 a.m.10 views

CVE-2026-2967

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/netbuiltin.c of the component TCP Sequence Number Handler. The manipulation leads to improper verification of source of a communication channel. The attack may be initiate...

6.3CVSS4.3AI score0.00491EPSS
SaveExploits1
CVE
CVE
added 2026/02/23 2:32 a.m.44 views

CVE-2026-2967

The CVE-2026-2967 entry describes a vulnerability in Cesanta Mongoose up to version 7.20, specifically in the getpeer function of /src/net_builtin.c within the TCP Sequence Number Handler. The underlying issue is improper verification of the source of a communication channel, potentially enabling...

6.3CVSS4.5AI score0.00491EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/02/23 2:32 a.m.9 views

CVE-2026-2967 Cesanta Mongoose TCP Sequence Number net_builtin.c getpeer verification of source

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/netbuiltin.c of the component TCP Sequence Number Handler. The manipulation leads to improper verification of source of a communication channel. The attack may be initiate...

6.3CVSS5AI score
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/02/23 12:0 a.m.9 views

CVE-2026-2967

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/netbuiltin.c of the component TCP Sequence Number Handler. The manipulation leads to improper verification of source of a communication channel. The attack may be initiate...

6.3CVSS5.2AI score0.00491EPSS
SaveExploits1References6
Rows per page
Query Builder