Lucene search
K

6 matches found

OSV
OSV
added 2026/02/25 5:25 p.m.0 views

CVE-2026-20129

A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain access to an affected system as a user who has the netadmin role. The vulnerability is due to improper authentication for requests that are sent to the API. An...

9.8CVSS5.9AI score0.00073EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/14 12:0 a.m.7 views

Bluspark BLUVOYIX 安全漏洞

Bluspark BLUVOYIX is a digital supply chain management platform from US-based Bluspark, Inc. Bluspark BLUVOYIX suffers from a security vulnerability that stems from improper authentication of the management API, which could lead an attacker to create new users with administrator privileges, which...

10CVSS6.8AI score0.00228EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/17 12:0 a.m.1 views

Moxa多款产品 安全漏洞

MOXA EDF-G1002-BP Series and so on are products of Moxa China.MOXA EDF-G1002-BP Series is a series of industrial-grade local area network LAN firewalls.Moxa EDR-8010 Series and so on are products of Moxa Taiwan.Moxa EDR-8010 Series is a series of secure routers.Moxa EDR-G9010 Series is a series o...

8.7CVSS6.2AI score0.00057EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2015-4736

Malware in sbrugna...

9.8CVSS9.4AI score0.00852EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 8:35 a.m.7 views

CVE-2019-25020

An issue was discovered in Scytl sVote 2.1. Because the sdm-ws-rest API does not require authentication, an attacker can retrieve the administrative configuration by sending a POST request to the /sdm-ws-rest/preconfiguration URI...

7.5CVSS6.8AI score0.00238EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2022/02/24 12:0 a.m.9 views

PT-2022-13397 · 1Byte · Copy9 +8

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an Insecure Direct Object...

7.5CVSS7.3AI score0.00498EPSS
Exploits0References5
Rows per page
Query Builder