Lucene search
+L

56388 matches found

Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.20 views

PT-2026-23459

Name of the Vulnerable Software and Affected Versions RustDesk Client versions through 1.4.5 Description An improper certificate validation issue exists in the RustDesk Client, potentially allowing an Adversary in the Middle AiTM attack. The issue is related to the handling of TLS retries and the...

9.1CVSS5.9AI score0.00313EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2026/03/05 12:00 a.m.20 views

Tata Consultancy Services Cognix Recon Client 安全漏洞

Tata Consultancy Services Cognix Recon Client is a financial reconciliation software developed by Tata Consultancy Services in India. Version 3.0 of Tata Consultancy Services Cognix Recon Client contains a security vulnerability. This vulnerability stems from an access control flaw in the passwor...

8.1CVSS5.8AI score0.00274EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.17 views

PT-2026-23478

Name of the Vulnerable Software and Affected Versions Tata Consultancy Services Cognix Recon Client version 3.0 Description A lack of proper authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 enables remote attackers to access application...

7.5CVSS5.8AI score0.00411EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/03/05 12:00 a.m.6 views

CVE-2026-26417

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...

5.9AI score0.00274EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.12 views

PT-2026-23455

Name of the Vulnerable Software and Affected Versions RustDesk Client versions through 1.4.5 Description A flaw exists in RustDesk Client that allows for authentication bypass through capture-replay attacks and the use of a password hash with insufficient computational effort. This impacts the...

9.8CVSS5.9AI score0.00269EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.18 views

PT-2026-23466

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution', Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbb common on Windows, MacOS, Linux Password security module, config encryption, machine...

8.2CVSS6AI score0.00083EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/05 12:00 a.m.5 views

CVE-2026-26417

A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...

6AI score0.00274EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.15 views

PT-2026-23457

Name of the Vulnerable Software and Affected Versions RustDesk Client versions through 1.4.5 Description A flaw exists in RustDesk Client on Windows, MacOS, Linux, iOS, Android, and WebClient that allows manipulation of Application API Messages through a Man-in-the-Middle attack. The issue is...

8.3CVSS5.8AI score0.00265EPSS
SaveExploits1References9
CVE
CVE
added 2026/03/05 12:00 a.m.44 views

CVE-2026-26418

The CVE-2026-26418 entry affects Tata Consultancy Services Cognix Recon Client v3.0. The vulnerability is a missing authentication and authorization flaw in the web API, enabling remote attackers to access application functionality over the network without restriction. According to the provided m...

7.5CVSS6AI score0.00411EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/03/05 12:00 a.m.5 views

FreeBSD : oauth2-proxy -- multiple vulnerabilities (10319b08-f050-4beb-95e3-fe025cdafd25)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 10319b08-f050-4beb-95e3-fe025cdafd25 advisory. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields...

10CVSS6AI score0.00765EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.27 views

PT-2026-23463

Name of the Vulnerable Software and Affected Versions RustDesk Client versions through 1.4.5 Description A flaw exists in RustDesk Client related to insufficient verification of data authenticity and improper handling of exceptional conditions, specifically allowing protocol manipulation. The iss...

8.2CVSS5.9AI score0.00288EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.17 views

PT-2026-23451

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Config import, URI scheme handler, CLI --config modules allows Retrieve Embedded Sensitive Data. This vulnerability is associated wit...

8.7CVSS5.9AI score0.0024EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.17 views

PT-2026-23464

Name of the Vulnerable Software and Affected Versions RustDesk Client versions through 1.4.5 Description A flaw exists in RustDesk Client on Windows, MacOS, Linux, iOS, Android, and WebClient, specifically within the client signaling, API sync loop, and config management modules. This issue allow...

9.8CVSS5.9AI score0.00376EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.16 views

PT-2026-23494

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A security issue exists in org.keycloak.broker.saml. Specifically, a disabled Security Assertion Markup Language SAML client configured as an Identity Provider IdP-initiated broker landing...

8.8CVSS5.8AI score0.00469EPSS
SaveExploits0References22
CNNVD
CNNVD
added 2026/03/05 12:00 a.m.24 views

Tata Consultancy Services Cognix Recon Client 安全漏洞

Tata Consultancy Services Cognix Recon Client is a financial reconciliation software developed by Tata Consultancy Services in India. Version 3.0 of Tata Consultancy Services Cognix Recon Client contains a security vulnerability. This vulnerability stems from the lack of authentication and...

7.5CVSS5.8AI score0.00411EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.22 views

PT-2026-23477

Name of the Vulnerable Software and Affected Versions Tata Consultancy Services Cognix Recon Client version 3.0 Description A broken access control issue exists in the password reset functionality. Authenticated users can reset passwords for any user account by sending specially crafted requests...

8.1CVSS5.8AI score0.00274EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.30 views

PT-2026-23462

Name of the Vulnerable Software and Affected Versions RustDesk Client versions through 1.4.5 Description A missing authorization issue exists in the RustDesk Client on Windows, MacOS, Linux, iOS, and Android. The issue allows manipulation of Application API Messages via a Man-in-the-Middle attack...

9.3CVSS5.8AI score0.00455EPSS
SaveExploits1References9
ATTACKERKB
ATTACKERKB
added 2026/03/05 12:00 a.m.22 views

CVE-2026-26418

Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network...

6AI score0.00411EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/03/05 12:00 a.m.11 views

Net::NSCA::Client 安全漏洞

Net::NSCA::Client is a Perl library developed by DOUGDUDE’s individual developer. Versions of Net::NSCA::Client 0.009002 and earlier contain security vulnerabilities, which stem from the use of insecure random number generators. This could lead to the prediction of session IDs...

9.1CVSS5.8AI score0.00409EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.23 views

PT-2026-23458

Cross-Site Request Forgery CSRF vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Flutter URI scheme handler, FFI bridge modules allows Privilege Escalation. This vulnerability is associated with program files flutter/lib/common.Dart,...

9.3CVSS5.9AI score0.00306EPSS
SaveExploits1References3
Rows per page
Query Builder