Lucene search
+L

175 matches found

NVD
NVD
•added 2026/09/16 9:17 p.m.•16 views

CVE-2026-76438

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could...

6.5CVSS0.00558EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/16 8:21 p.m.•34 views

CVE-2026-76438 Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could...

6.5CVSS0.00558EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/16 8:21 p.m.•14 views

CVE-2026-76438 Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could...

6.5CVSS5.9AI score0.00558EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/16 8:21 p.m.•64 views

CVE-2026-76438

CVE-2026-76438 affects the web-based management interface of Cisco BroadWorks CommPilot Application Software , where missing authorization checks allow an authenticated, remote attacker with low privileges to send a crafted HTTP request and alter configurations on select pages . The vulnerability...

6.5CVSS5.9AI score0.00558EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/16 8:21 p.m.•42 views

EUVD-2026-81161

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could...

6.5CVSS5.9AI score0.00558EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/09/16 4:00 p.m.•15 views

Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could...

6.5CVSS5.9AI score0.00558EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•2 views

CVE-2026-76438: Incorrect Authorization

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could...

6.5CVSS5.9AI score0.00558EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/19 5:18 p.m.•18 views

CVE-2026-20320

A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...

7.5CVSS0.00495EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/19 4:39 p.m.•115 views

CVE-2026-20320

CVE-2026-20320 is an Out-of-Band Blind XML External Entity (XXE) Injection vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks . The root cause is that external entity resolution is allowed by default, enabling an unauthenticated, remote attacker to send a crafted XML ...

7.5CVSS5.6AI score0.00495EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/19 4:39 p.m.•25 views

EUVD-2026-62586

A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...

7.5CVSS5.6AI score0.00495EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/19 4:39 p.m.•16 views

CVE-2026-20320

A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...

7.5CVSS5.6AI score0.00495EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/19 4:39 p.m.•47 views

CVE-2026-20320

A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...

7.5CVSS0.00495EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/08/19 4:00 p.m.•23 views

Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability

A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...

7.5CVSS5.6AI score0.00495EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/19 12:00 a.m.•44 views

PT-2026-78521

Name of the Vulnerable Software and Affected Versions Cisco BroadWorks affected versions not specified Description An issue in the Open Client Interface OCI XML Parser allows an unauthenticated remote attacker to read sensitive configuration information. This occurs because the parser improperly...

7.5CVSS5.8AI score0.00495EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2021-21435

Malware in sbrugna...

7.2CVSS6.9AI score0.01281EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-4669

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00307EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-24395

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00158EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2021-7029

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.00873EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-2157

Malicious code in bioql PyPI...

7.5CVSS8.2AI score0.00859EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2024-17985

Malicious code in bioql PyPI...

5.4CVSS5.7AI score0.00355EPSS
SaveExploits0References1
Rows per page
Query Builder