Lucene search
+L

36054 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 8:59 a.m.•8 views

CVE-2023-50253

Laf is a cloud development platform. In the Laf version design, the log uses communication with k8s to quickly retrieve logs from the container without the need for additional storage. However, in version 1.0.0-beta.13 and prior, this interface does not verify the permissions of the pod, which...

9.6CVSS6.2AI score0.00741EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:58 a.m.•10 views

CVE-2023-45246

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 36343, Acronis Cyber Protect 16 Linux, macOS, Windows before build 39169...

7.1CVSS6.2AI score0.00214EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:51 a.m.•13 views

CVE-2021-2317

Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway component: Management Console. The supported version that is affected is Prior to 1.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

10CVSS7.4AI score0.01872EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:45 a.m.•15 views

CVE-2022-38387

IBM Cloud Pak for Security CP4S 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 233786...

8.8CVSS7.2AI score0.009EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:45 a.m.•12 views

CVE-2022-38385

IBM Cloud Pak for Security CP4S 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive information or perform unauthorized actions due to improper input validation. IBM X-Force ID: 233777...

8.1CVSS5.9AI score0.00529EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:38 a.m.•9 views

CVE-2026-21877

n8n is an open source workflow automation platform. In versions 0.121.2 and below, an authenticated attacker may be able to execute malicious code using the n8n service. This could result in full compromise and can impact both self-hosted and n8n Cloud instances. This issue is fixed in version...

9.9CVSS7.1AI score0.05373EPSS
SaveExploits1References1
OSV
OSV
•added 2026/01/09 7:16 a.m.•12 views

CVE-2026-20975

Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path...

5.5CVSS5.9AI score0.0014EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/09 7:16 a.m.•18 views

CVE-2026-20975

Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path...

5.5CVSS0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/09 6:16 a.m.•5 views

CVE-2026-20975

Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path...

2.1CVSS6.1AI score0.0014EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/09 6:16 a.m.•31 views

CVE-2026-20975

CVE-2026-20975 affects Samsung Cloud prior to version 5.6.11. The vulnerability arises from improper handling of insufficient permissions, enabling local attackers to access specific files in arbitrary paths. Evidence across multiple feeds confirms the affected software and impact; exploitation s...

5.5CVSS6.1AI score0.0014EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/01/09 6:16 a.m.•39 views

CVE-2026-20975

Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path...

2.1CVSS0.0014EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/01/09 1:14 a.m.•296 views

Exploit for CVE-2025-45955

CVE-2025-45955 šŸ•³ļø Server-Side Request Forgery in DonWeb Ferozo...

6.8AI score
SaveExploits1
Packet Storm News
Packet Storm News
•added 2026/01/09 12:00 a.m.•18 views

Multi-Regional Cloud Honeypot Dataset (MURHCAD)

This data article introduces a comprehensive, high-resolution honeynet dataset designed to support standalone analyses of global cyberattack behaviors. Collected over a continuous 72-hour window June 9 to 11, 2025 on Microsoft Azure, the dataset comprises 132,425 individual attack events captured...

6.9AI score
SaveExploits0
CNNVD
CNNVD
•added 2026/01/09 12:00 a.m.•10 views

Samsung Cloud å®‰å…Øę¼ę“ž

SAMSUNG Cloud is an application from the South Korean company Samsung SAMSUNG. It is used to provide a feature to save and view images. A security vulnerability exists in Samsung Cloud versions prior to 5.6.11, which stems from mishandling of insufficient permissions and could lead to accessing...

5.5CVSS6.6AI score0.0014EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/09 12:00 a.m.•11 views

PT-2026-2056

Name of the Vulnerable Software and Affected Versions Samsung Cloud versions prior to 5.6.11 Description A flaw exists in Samsung Cloud that involves improper handling of insufficient permissions. This allows local attackers to access specific files in arbitrary paths. Recommendations Update...

2.1CVSS6.3AI score0.0014EPSS
SaveExploits0References4
NVD
NVD
•added 2026/01/08 1:15 a.m.•13 views

CVE-2026-21877

n8n is an open source workflow automation platform. In versions 0.121.2 and below, an authenticated attacker may be able to execute malicious code using the n8n service. This could result in full compromise and can impact both self-hosted and n8n Cloud instances. This issue is fixed in version...

9.9CVSS0.05373EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/01/08 12:39 a.m.•43 views

CVE-2026-21877 n8n is vulnerable to Remote Code Execution via Arbitrary File Write

n8n is an open source workflow automation platform. In versions 0.121.2 and below, an authenticated attacker may be able to execute malicious code using the n8n service. This could result in full compromise and can impact both self-hosted and n8n Cloud instances. This issue is fixed in version...

9.9CVSS0.05373EPSS
SaveExploits1References2
OSV
OSV
•added 2026/01/08 12:39 a.m.•8 views

CVE-2026-21877 n8n is vulnerable to Remote Code Execution via Arbitrary File Write

n8n is an open source workflow automation platform. In versions 0.121.2 and below, an authenticated attacker may be able to execute malicious code using the n8n service. This could result in full compromise and can impact both self-hosted and n8n Cloud instances. This issue is fixed in version...

9.9CVSS7.2AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/01/08 12:00 a.m.•10 views

Microsoft Entra Cloud Sync Installed (Windows)

Binary data microsoftentracloudsyncwininstalled.nbin...

7AI score
SaveExploits0References1
The Hacker News
The Hacker News
•added 2026/01/07 5:19 p.m.•12 views

Webinar: Learn How AI-Powered Zero Trust Detects Attacks with No Files or Indicators

Security teams are still catching malware. The problem is what they're not catching. More attacks today don't arrive as files. They don't drop binaries. They don't trigger classic alerts. Instead, they run quietly through tools that already exist inside the environment — scripts, remote access,...

7.2AI score
SaveExploits0
Rows per page
Query Builder