Lucene search
+L

77473 matches found

NVD
NVD
added 2 hours ago8 views

CVE-2025-15631

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized acces...

5.7CVSS
SaveExploits0References3
NVD
NVD
added 2 hours ago6 views

CVE-2025-15544

A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related...

6.9CVSS
SaveExploits0References3
Cvelist
Cvelist
added 3 hours ago8 views

CVE-2025-15631 Weak Credential Storage in TP-Link Omada Devices

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized acces...

5.7CVSS
SaveExploits0References3
EUVD
EUVD
added 3 hours ago5 views

EUVD-2025-210613

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized acces...

5.7CVSS5.2AI score
SaveExploits0References3
CVE
CVE
added 3 hours ago6 views

CVE-2025-15631

CVE-2025-15631 describes a cryptographic weakness in TP-Link Omada devices where site credentials are protected with a legacy hashing algorithm that does not provide sufficient protection. The affected component is credential storage on Omada devices; the root cause is the use of an inadequate ha...

5.7CVSS5.2AI score
SaveExploits0References3
EUVD
EUVD
added 3 hours ago3 views

EUVD-2025-210608

A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related...

6.9CVSS5.3AI score
SaveExploits0References3
Cvelist
Cvelist
added 3 hours ago9 views

CVE-2025-15544 Weak Credential Protection During TP-Link Omada Device Adoption

A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related...

6.9CVSS
SaveExploits0References3
NVD
NVD
added 7 hours ago4 views

CVE-2026-69084

SiYuan versions = v3.7.2 expose the /api/search/searchEmbedBlock endpoint, which passes a client-supplied SQL statement verbatim to the main read-write siyuan.db handle with no single-statement, read-only, or admin restrictions. The endpoint is gated only by CheckAuth, making it reachable by the...

10CVSS
SaveExploits0References2
Cvelist
Cvelist
added 8 hours ago9 views

CVE-2026-68586 SiYuan before v3.7.3 Content Disclosure via getBacklinkDoc

SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc and getBackmentionDoc content endpoints /api/ref/getBacklinkDoc and /api/ref/getBackmentionDoc. While the corresponding backlink list endpoints filter publish-forbidden documents, the content endpoints gated only by...

9.2CVSS
SaveExploits0References2
NVD
NVD
added 8 hours ago4 views

CVE-2026-56608

HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access or view administrator-level functionalities without appropriate authorization...

3.7CVSS
SaveExploits0References1
CVE
CVE
added 10 hours ago6 views

CVE-2026-56608

CVE-2026-56608 concerns HCL iControl and is a Missing Access Control vulnerability. It states that the application failed to enforce proper granular access controls, enabling users to access or view administrator-level functionalities without proper authorization. The CVSS v3.1 base score is 3.7 ...

3.7CVSS5.5AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
added 10 hours ago3 views

CVE-2026-56608 HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).

HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access or view administrator-level functionalities without appropriate authorization...

3.7CVSS5.5AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 10 hours ago2 views

CVE-2026-56608

HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access or view administrator-level functionalities without appropriate authorization...

3.7CVSS5.5AI score
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 11 hours ago3 views

CVE-2026-67295

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability allows a malicious RDP server to bypass security checks during drive redirection. By sending specially crafted paths, the server can access, read, write, delete, and list files in...

6.3CVSS5.4AI score0.00245EPSS
SaveExploits0References6
Cvelist
Cvelist
added 11 hours ago10 views

CVE-2026-33591 Authentication bypass on WaptServer

A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated attacker to bypass security restriction using a specially crafted packet and retrieve a valid session token for the targeted account...

10CVSS
SaveExploits0References3
CVE
CVE
added 14 hours ago8 views

CVE-2026-28147

The CVE-2026-28147 entry concerns a Missing Authorization vulnerability in the WordPress plugin Unlimited Elements for Elementor (Free Widgets, Addons, Templates). Affected versions are up to 2.0.15; the issue is described as broken/incorrectly configured access control that could allow unauthori...

5.4CVSS5.4AI score
SaveExploits0References1
EUVD
EUVD
added 14 hours ago5 views

EUVD-2026-52188

A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the application directory, potentially resulting in unauthorized access to connected devices and exposure, modification, or disrupti...

8.4CVSS5.5AI score
SaveExploits0References1
CVE
CVE
added 14 hours ago11 views

CVE-2026-9593

The CVE-2026-9593 entry describes a vulnerability in the iDTM FDI where an attacker with elevated privileges on the host can enable the debug interface by placing a crafted file in the application directory. This could lead to unauthorized access to connected devices and exposure, modification, o...

8.4CVSS5.5AI score
SaveExploits0References1
Cvelist
Cvelist
added 14 hours ago12 views

CVE-2026-9593 iDTM FDI Unauthorized Debug Interface Enablement

A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the application directory, potentially resulting in unauthorized access to connected devices and exposure, modification, or disrupti...

8.4CVSS
SaveExploits0References1
EUVD
EUVD
added 15 hours ago4 views

EUVD-2026-52175

The Simple Membership WordPress plugin before 4.7.8 does not verify whether user creation failed during registration before using the returned value as a user ID to update an account, allowing unauthenticated attackers to overwrite the primary administrator's account data including the email...

9.4CVSS5.5AI score
SaveExploits0References1
Rows per page
Query Builder