Lucene search
K

88 matches found

Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.4 views

PT-2026-32607

Name of the Vulnerable Software and Affected Versions SINEC NMS versions prior to 4.0 SP3 with UMC Description An authentication weakness exists in the UMC component due to insufficient validation of user identity. This flaw allows an unauthenticated remote attacker to bypass authentication and...

7.3CVSS5.8AI score0.00042EPSS
Exploits0References5
ICS
ICS
added 2026/04/14 12:0 a.m.5 views

Siemens SINEC NMS

SUMMARY Siemens SINEC NMS when used with User Management Component UMC contains an authentication bypass vulnerability due to insufficient validation of user identity. This could allow an unauthenticated remote attacker to bypass authentication and gain unauthorized access to the application...

7.3CVSS5.8AI score0.00042EPSS
Exploits0References10
EUVD
EUVD
added 2026/03/24 3:30 p.m.1 views

EUVD-2026-14893

iCMS v8.0.0 contains a Cross-Site Scripting XSS vulnerability in the User Management component, specifically within the index.html file. This allows remote attackers to execute arbitrary web script or HTML via the regip or loginip parameters...

6.1CVSS6.1AI score0.00066EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.2 views

iCMS 安全漏洞

iCMS is a software application. It is a highly efficient and concise content management system built using PHP and MySQL. The iCMS v8.0.0 version has a security vulnerability, which stems from improper handling of the regip or loginip parameters by the user management component. This may lead to...

6.1CVSS5.6AI score0.00066EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/02/11 1:16 p.m.1 views

CVE-2026-25656

A vulnerability has been identified in SINEC NMS All versions V4.0 SP3, User Management Component UMC All versions V2.15.2.1. The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially...

8.5CVSS7.6AI score0.00011EPSS
Exploits0References1
OSV
OSV
added 2026/02/10 10:15 a.m.2 views

CVE-2026-25656

A vulnerability has been identified in SINEC NMS All versions, User Management Component UMC All versions V2.15.2.1. The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to...

7.8CVSS6.2AI score
Exploits0References1
NVD
NVD
added 2026/02/10 10:15 a.m.4 views

CVE-2026-25656

A vulnerability has been identified in SINEC NMS All versions V4.0 SP3, User Management Component UMC All versions V2.15.2.1. The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially...

8.5CVSS0.00011EPSS
Exploits0References1
CVE
CVE
added 2026/02/10 9:58 a.m.9 views

CVE-2026-25656

CVE-2026-25656 affects SINEC NMS User Management Component (UMC) across all versions and all SINEC NMS deployments where UMC is

8.5CVSS7.6AI score0.00011EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2026/02/10 9:58 a.m.22 views

CVE-2026-25656

A vulnerability has been identified in SINEC NMS All versions V4.0 SP3, User Management Component UMC All versions V2.15.2.1. The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially...

8.5CVSS0.00011EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/10 9:58 a.m.2 views

CVE-2026-25656

A vulnerability has been identified in SINEC NMS All versions V4.0 SP3, User Management Component UMC All versions V2.15.2.1. The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially...

8.5CVSS7.6AI score0.00011EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.4 views

PT-2026-7259

Name of the Vulnerable Software and Affected Versions SINEC NMS versions prior to 2.15.2.1 User Management Component UMC versions prior to 2.15.2.1 Description The application allows unauthorized modification of a configuration file by a user with limited privileges. This could enable an attacker...

8.5CVSS6.2AI score0.00011EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2026/01/09 8:45 a.m.4 views

CVE-2025-40795

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SIMATIC PCS neo V6.0 All versions, User Management Component UMC All versions V2.15.1.3. Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC...

9.8CVSS8.1AI score0.00374EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-27238

Malicious code in bioql PyPI...

8.7CVSS6.4AI score0.00154EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-27237

Malicious code in bioql PyPI...

8.7CVSS6.4AI score0.00154EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-14396

Malicious code in bioql PyPI...

8.7CVSS6.4AI score0.00251EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-27239

Malicious code in bioql PyPI...

8.7CVSS6.4AI score0.00154EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-46224

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.00274EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-53457

Malicious code in bioql PyPI...

9.8CVSS8.6AI score0.00099EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-27240

Malicious code in bioql PyPI...

9.8CVSS6.4AI score0.00374EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/26 12:0 a.m.4 views

Siemens User Management Component Out-of-bounds Read DoS (CVE-2025-40797)

Binary data siemensumccve-2025-40797.nbin...

8.7CVSS7AI score0.00154EPSS
Exploits0References2
Rows per page
Query Builder