Lucene search
K

8 matches found

OSV
OSV
added 2026/05/08 8:50 a.m.2 views

BIT-MONGODB-2026-6915 Flaw in the updateUser Command May Allow Unauthorized Configuration Change

An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account...

6.3CVSS5.8AI score0.00072EPSS
Exploits0References2
NVD
NVD
added 2026/04/29 5:16 p.m.1 views

CVE-2026-6915

An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account...

6.3CVSS0.00072EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/29 4:51 p.m.0 views

CVE-2026-6915

An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account...

6.3CVSS5.3AI score0.00072EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/29 4:51 p.m.1 views

CVE-2026-6915 Flaw in the updateUser Command May Allow Unauthorized Configuration Change

An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account...

6.3CVSS5.3AI score0.00072EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/03/16 12:0 a.m.0 views

Robotronic RunAsSpc 信任管理问题漏洞

Robotronic RunAsSpc is a software that supports running an application without a password in another system account. A security vulnerability exists in Robotronic RunAsSpc 4.0 that stems from the affected product's use of a common and reversible encryption key...

7.5CVSS7.3AI score0.00148EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/10/07 12:0 a.m.2 views

Artica Integria IMS 安全漏洞

Artica Integria IMS is a web-based help desk software from the Spanish company Artica. The software features SLA tracking, workflow management, personalized reporting and email management.A security vulnerability exists in the Artica Integria IMS login checks, which could be exploited by an...

9.8CVSS8.3AI score0.00607EPSS
Exploits0References4
Cvelist
Cvelist
added 2018/04/25 6:0 p.m.14 views

CVE-2018-10212

An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization leading to creation of folders within another account via a modified device value...

5.4AI score0.00146EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2018/04/25 12:0 a.m.3 views

PT-2018-9759 · Vaultize · Vaultize Enterprise File Sharing

Name of the Vulnerable Software and Affected Versions: Vaultize Enterprise File Sharing version 17.05.31 Description: An issue was discovered that allows improper authorization, leading to the creation of folders within another account via a modified device value. Recommendations: For Vaultize...

5.5CVSS5.4AI score0.00146EPSS
Exploits0References4
Rows per page
Query Builder