Lucene search
K

11 matches found

CNNVD
CNNVD
added 2026/06/08 12:0 a.m.1 views

Checkmk 跨站脚本漏洞

Checkmk is an IT monitoring platform developed by Checkmk Corporation. Versions of Checkmk prior to 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions contain a cross-site scripting vulnerability. This vulnerability stems from the storage of malicious HTML or JavaScript in the change logs,...

4.8CVSS5.2AI score0.00142EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/05/26 8:14 p.m.9 views

CVE-2026-40127

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in...

5.3CVSS5.8AI score0.00319EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/25 10:18 a.m.8 views

CVE-2026-40127

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in...

5.3CVSS5.8AI score0.00319EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/05/25 10:18 a.m.12 views

CVE-2026-40127 Authorization Bypass Through User-Controlled Key in OutSystems Lifetime

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in...

5.3CVSS5.8AI score0.00319EPSS
Exploits0References2
CVE
CVE
added 2026/05/25 10:18 a.m.15 views

CVE-2026-40127

CVE-2026-40127 affects OutSystems Lifetime. The vulnerability is an Authorization Bypass Through User-Controlled Key in the ApplicationID parameter, allowing any authenticated user to read the Change Log and the application name of any application. Impact is limited to confidentiality of Change L...

5.3CVSS5.8AI score0.00319EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.9 views

PT-2026-43032

OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in...

5.3CVSS5.8AI score0.00319EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.5 views

OutSystems Lifetime 安全漏洞

OutSystems Lifetime is a low-code platform management control center from OutSystems USA. A security vulnerability exists in OutSystems Lifetime versions prior to 11.28.2.3955, which stems from the presence of the ApplicationID parameter to bypass authorization via a user control key, which could...

5.3CVSS5.8AI score0.00319EPSS
Exploits0References3
OSV
OSV
added 2022/09/06 11:15 p.m.1 views

CVE-2022-1522

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 3354 and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to create false logs that show the password as having been changed when it is not, complicating forensics...

5.3CVSS5.8AI score0.00461EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2015/04/11 5:7 p.m.3 views

asterisk

The AsteriskR Open Source PBX By Mark Spencer and the...

6.5AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2013/04/08 12:0 a.m.35 views

Fedora 18 : asterisk-11.2.2-1.fc18 (2013-4566)

The Asterisk Development Team has announced security releases for Certified Asterisk 1.8.15 and Asterisk 1.8, 10, and 11. The available security releases are released as versions 1.8.15-cert2, 1.8.20.2, 10.12.2, 10.12.2-digiumphones, and 11.2.2. These releases are available for immediate download...

7.5CVSS5.9AI score0.02621EPSS
Exploits0References12
OpenVAS
OpenVAS
added 2009/11/11 12:0 a.m.44 views

Fedora Core 11 FEDORA-2009-10639 (kernel)

The remote host is missing an update to kernel announced via advisory FEDORA-2009-10639. OpenVAS Vulnerability Test $Id: fcore200910639.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10639 kernel Authors: Thomas Reinke Copyright: Copyright c 2009...

7.2CVSS1AI score0.03848EPSS
Exploits7References6
Rows per page
Query Builder