Lucene search
K

122 matches found

Cvelist
Cvelist
added 2026/06/04 5:23 a.m.41 views

CVE-2026-49189 Broadcast Receiver Privilege Escalation

Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke administrative operations...

8.5CVSS0.00098EPSS
Exploits0References1
EUVD
EUVD
added 2026/06/04 5:23 a.m.8 views

EUVD-2026-34208

Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke administrative operations...

8.5CVSS5.8AI score0.00098EPSS
Exploits0References1
Snyk
Snyk
added 2026/05/08 10:59 p.m.5 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the nnef-oam route group due to missing inbound authentication and authorization checks. An attacker can gain unauthorized access to administrative operations by sending unauthenticated requests to the exposed...

10CVSS5.8AI score0.00287EPSS
Exploits1References3
Veracode
Veracode
added 2026/02/09 7:31 a.m.4 views

Authentication Bypass

Keylime is vulnerable to an Authentication Bypass. The vulnerability is due to missing enforcement of client-side TLS authentication in the Keylime registrar, allowing unauthenticated clients with network access to perform administrative operations such as listing agents, retrieving public TPM...

9.8CVSS5.5AI score0.05805EPSS
Exploits0References9Affected Software1
RedHat Linux
RedHat Linux
added 2026/02/09 2:49 a.m.2 views

keylime: Keylime: Authentication bypass allows unauthorized administrative operations due to missing client-side TLS authentication

A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security TLS authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing...

9.8CVSS5.7AI score0.05805EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/02/09 12:0 a.m.4 views

JetBrains Hub 访问控制错误漏洞

JetBrains Hub is a web-based application developed by Czech company JetBrains. This program allows for the integration of various JetBrains tools. Versions of JetBrains Hub prior to 2025.3.119807 contained a access control vulnerability caused by an authentication bypass, which could lead to the...

9.8CVSS5.9AI score0.00425EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2026/02/06 9:30 p.m.8 views

Duplicate Advisory: Keylime Missing Authentication for Critical Function and Improper Authentication

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4jqp-9qjv-57m2. This link is maintained to preserve external references. Original Description A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Laye...

9.8CVSS5.3AI score0.05805EPSS
Exploits0References7Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/06 7:13 p.m.3 views

CVE-2026-1709

A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security TLS authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing...

9.8CVSS5.4AI score0.05805EPSS
Exploits0References3
NVD
NVD
added 2026/01/26 8:16 p.m.5 views

CVE-2025-14525

A flaw was found in kubevirt. A user within a virtual machine VM, if the guest agent is active, can exploit this by causing the agent to report an excessive number of network interfaces. This action can overwhelm the system's ability to store VM configuration updates, effectively blocking changes...

6.4CVSS0.0026EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/26 7:36 p.m.5 views

CVE-2025-14525

A flaw was found in kubevirt. A user within a virtual machine VM, if the guest agent is active, can exploit this by causing the agent to report an excessive number of network interfaces. This action can overwhelm the system's ability to store VM configuration updates, effectively blocking changes...

6.4CVSS5.8AI score0.0026EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/26 12:0 a.m.3 views

PT-2026-4806

Name of the Vulnerable Software and Affected Versions kubevirt affected versions not specified Description A flaw exists in kubevirt where a user inside a virtual machine VM, with an active guest agent, can trigger a denial of service. By reporting an excessive number of network interfaces, the...

6.4CVSS5.2AI score0.0026EPSS
Exploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-16627

Malware in sbrugna...

10CVSS9.2AI score0.04932EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2018-16622

Malware in sbrugna...

8.8CVSS8.8AI score0.01837EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2009-4370

Malware in sbrugna...

7.5CVSS6.1AI score0.01391EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-5218

Malware in sbrugna...

7.5CVSS7.4AI score0.01652EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2015-7691

Malware in sbrugna...

10CVSS9.5AI score0.02761EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-11825

Malware in sbrugna...

8.8CVSS8.8AI score0.01417EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-34480

Malicious code in bioql PyPI...

10CVSS9.2AI score0.01277EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-40961

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.01079EPSS
Exploits0References1
CVE
CVE
added 2025/09/12 4:57 a.m.20 views

CVE-2025-10094

CVE-2025-10094 affects GitLab CE/EE, impacting all versions from 10.7 before 18.1.6; 18.2 before 18.2.6; and 18.3 before 18.3.2. The issue allows authenticated users to disrupt access to token listings and related administrative operations by creating tokens with excessively large names, a root c...

6.5CVSS6.4AI score0.00426EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder