Lucene search
K

4 matches found

CVE
CVE
added 2026/05/29 9:19 p.m.31 views

CVE-2026-9831

The CVE-2026-9831 entry describes a race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path. Under high-concurrency traffic, requests authenticated with an Extreme Platform ONE /IAM API key could intermittently return data for a different tenant, indicating cross...

6.3CVSS5.8AI score0.00051EPSS
Exploits0References1
OSV
OSV
added 2024/10/02 7:15 p.m.2 views

CVE-2024-20509

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to hijack an AnyConnect VPN session or cause a denial of service DoS condition for individual users of the AnyConnect VPN...

5.9CVSS5.8AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2023/07/13 8:42 a.m.4 views

dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method

A vulnerability was found in dotNET applications where account lockout maximum failed attempts may not be immediately updated, allowing an attacker to try more passwords and bypass security restrictions. This flaw allows a remote attacker to bypass security features, causing an impact on...

8.1CVSS5.8AI score0.0024EPSS
Exploits0References8
OSV
OSV
added 2022/07/20 10:26 a.m.0 views

USN-5527-2 check-mk vulnerabilities

USN-5527-1 fixed vulnerabilities in Checkmk. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Checkmk incorrectly handled authentication. An attacker could possibly use this issue to cause a race condition leading to information...

6.1CVSS6.7AI score0.19623EPSS
Exploits8References5
Rows per page
Query Builder