Lucene search
K

492 matches found

Fedora
Fedora
added yesterday5 views

[SECURITY] Fedora 44 Update: roundcubemail-1.7.1-1.fc44

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

8.1CVSS5.8AI score0.00105EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2 days ago3 views

CVE-2026-48133

When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway...

7.5CVSS5.8AI score0.00126EPSS
Exploits0References1
NVD
NVD
added 2026/05/26 2:16 p.m.5 views

CVE-2026-48133

When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway...

7.5CVSS0.00126EPSS
Exploits0References1
CVE
CVE
added 2026/05/26 12:56 p.m.22 views

CVE-2026-48133

The CVE-2026-48133 issue affects the Identity Awareness blade when Browser-Based Authentication is enabled on the Security Gateway, allowing an unauthenticated attacker to read certain internal files. The NVD entry details no exploitation specifics beyond the unauthenticated local file read, and ...

7.5CVSS5.8AI score0.00126EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/26 12:56 p.m.4 views

EUVD-2026-31820

When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway...

7.5CVSS5.8AI score0.00126EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/26 12:56 p.m.32 views

CVE-2026-48133 Identity Awareness Captive Portal - Unauthenticated Local File Inclusion

When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway...

7.5CVSS0.00126EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/26 12:56 p.m.5 views

CVE-2026-48133

When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway...

7.5CVSS5.8AI score0.00126EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.5 views

PT-2026-43237

When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway...

7.5CVSS5.8AI score0.00126EPSS
Exploits0References2
CheckPoint Security
CheckPoint Security
added 2026/05/24 12:0 a.m.5 views

CVE-2026-48133 Identity Awareness Captive Portal - Unauthenticated Local File Inclusion

Symptoms - When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway. - This issue affects: R82.10 with Jumbo Hotfix Take 6 or below R82 with Jumbo Hotfix Take 91 or below R81.20 with...

7.5CVSS5.8AI score0.00126EPSS
Exploits0
GithubExploit
GithubExploit
added 2026/05/17 4:52 p.m.54 views

MillieRCE

MillieRCE Millie is an advanced browser-based remote code exec...

6.5AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/05/14 7:58 p.m.3 views

CVE-2025-27853

The locally served web site on the Garmin WDU v1 1.4.6 and v2 5.0 allows its authentication to be bypassed. The WDU web site only performs authentication with the client within the client's browser. The WebSockets used to communicate with the WDU server do not enforce any authentication. An...

7.3CVSS5.8AI score0.00065EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.3 views

Microsoft Windows Admin Center 安全漏洞

Microsoft Windows Admin Center is a browser-based, locally deployed application developed by Microsoft. This tool is primarily used for managing servers and clusters. There are security vulnerabilities in Microsoft Windows Admin Center. Attackers can exploit these vulnerabilities to gain higher...

8.3CVSS5.8AI score0.00065EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/06 4:15 p.m.2 views

CVE-2026-20172

A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email ECE could allow an authenticated, remote attacker to conduct browser-based attacks. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Agent. This...

4.3CVSS6AI score0.00022EPSS
Exploits0References2Affected Software1
Fedora
Fedora
added 2026/04/25 1:53 a.m.1 views

[SECURITY] Fedora 44 Update: roundcubemail-1.7~rc6-1.fc44

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

8.2CVSS5.3AI score0.00048EPSS
Exploits0
CVE
CVE
added 2026/04/23 11:38 p.m.4 views

CVE-2026-1789

CVE-2026-1789 concerns a vulnerability in the browser-based remote management interface used by production printers and office/small office multifunction printers. The issue could allow an administrator to access sensitive device information via crafted requests. Affected software component: brow...

6.9CVSS5.8AI score0.00067EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/04/23 11:38 p.m.1 views

CVE-2026-1789

A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers...

6.9CVSS5.2AI score0.00067EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/04/23 12:0 a.m.0 views

PT-2026-34794

Name of the Vulnerable Software and Affected Versions Certain production printers and office/small office multifunction printers affected versions not specified Description A flaw in the browser-based remote management interface allows an administrator to access sensitive information on the devic...

6.9CVSS5.9AI score0.00067EPSS
Exploits0References8
Fedora
Fedora
added 2026/04/16 11:42 p.m.3 views

[SECURITY] Fedora 44 Update: cockpit-360.1-1.fc44

The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...

9.8CVSS5.8AI score0.26505EPSS
Exploits3
Fedora
Fedora
added 2026/04/10 1:2 a.m.2 views

[SECURITY] Fedora 43 Update: cockpit-360-1.fc43

The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...

9.8CVSS5.9AI score0.26505EPSS
Exploits3
RedhatCVE
RedhatCVE
added 2026/04/06 10:57 a.m.1 views

CVE-2026-35561

Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept or hijack authentication sessions due to insufficient protections in the browser-based authentication flows. To remediat...

9.8CVSS5.9AI score0.0003EPSS
Exploits0References1
Rows per page
Query Builder