CVE-2026-3130

Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM account that is currently checked out by selecting it alongside at least one non-checked-out account and performing a bulk deletion...

EUVD-2026-9336

Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM account that is currently checked out by selecting it alongside at least one non-checked-out account and performing a bulk deletion...

CVE-2026-3130

Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM account that is currently checked out by selecting it alongside at least one non-checked-out account and performing a bulk deletion...

CVE-2026-3130

Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM account that is currently checked out by selecting it alongside at least one non-checked-out account and performing a bulk deletion...

CVE-2026-3130

Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM account that is currently checked out by selecting it alongside at least one non-checked-out account and performing a bulk deletion...

CVE-2026-3130

Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM account that is currently checked out by selecting it alongside at least one non-checked-out account and performing a bulk deletion...

CVE-2026-3130

Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM account that is currently checked out by selecting it alongside at least one non-checked-out account and performing a bulk deletion...

CVE-2026-3130

Devolutions Server versions 2025.3.15 and earlier are vulnerable to an improper enforcement of behavioral controls. An authenticated attacker with delete permission can bypass intended protections to delete a Privileged Access Management (PAM) account that is currently checked out. This is achiev...

PT-2026-22828

Name of the Vulnerable Software and Affected Versions Devolutions Server versions 2025.3.15 and earlier Description An issue exists in Devolutions Server where improper enforcement of behavioral controls can allow an authenticated attacker with delete permission to remove a Privileged Access...

CVE-2022-1445

Stored Cross Site Scripting vulnerability in the checkedoutto parameter in GitHub repository snipe/snipe-it prior to 5.4.3. The vulnerability is capable of stolen the user Cookie...

Snipe-IT cross-site scripting vulnerabilities

Snipe-IT is an open source IT asset/license management system. snipe-IT has a cross-site scripting vulnerability that stems from a cross-site scripting vulnerability stored in the checkedoutto parameter, which can be exploited by attackers to obtain user cookies...

PT-2022-13895

Name of the Vulnerable Software and Affected Versions snipe-it versions prior to 5.4.3 Description The issue is related to a Stored Cross Site Scripting vulnerability in the checked out to parameter. This vulnerability can lead to the theft of a user's cookie. The input to the checked out to...

Cygwin: Input validation error vulnerability

Cygwin is an application program. DLL that provides substantial POSIX API functionality. An input validation error vulnerability exists in Cygwin Git, which stems from the fact that a specially designed repository containing symbolic links and files with backslash characters in the filename could...

udadmin -list -a shows incorrect license usage for XenMobile

After migrating from MDM 9 to XMS 10.X used license count exceeds the expected limit If you verify the checked out licenses using udadmin tool in licensing server, you should see licenses checked out for Used ID's as well as usernames. Steps: 1. Run the following command to change the directory t...