Lucene search
+L

5 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•3 views

CVE-2026-77404: Improper Encoding or Escaping of Output

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, URI.String in uri.go concatenates CertFile, KeyFile, CACertFile, and ServerName values directly into an AMQPS query string instead of encoding them as URL query parameters with url.Values. If an application accepts a TLS asset path...

8.7CVSS5.8AI score0.00098EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/22 7:23 p.m.•11 views

CVE-2026-14881

When importing connections in Compass it is possible to override some connection options that are otherwise can't be changed via connection form. In particular it is possible to provide a custom browser open command for OIDC auth flow that is usually can be set only globally via Compass settings...

8.4CVSS5.2AI score0.00194EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/07/22 7:23 p.m.•44 views

CVE-2026-14881 Compass connection import allows to override OIDC browser open command (usually set through settings), allowing for arbitrary shell commands execution when connecting to cluster using OIDC auth flow

When importing connections in Compass it is possible to override some connection options that are otherwise can't be changed via connection form. In particular it is possible to provide a custom browser open command for OIDC auth flow that is usually can be set only globally via Compass settings...

8.4CVSS0.00194EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/06/30 12:00 a.m.•43 views

Schneider Electric Geo SCADA Mobile Information Disclosure Vulnerability

Schneider Electric Geo SCADA Mobile is a mobile extension from Schneider Electric, a French company. It provides real-time remote access to critical SCADA data, allowing system users to monitor performance while "on the go," increasing employee productivity and improving overall system performanc...

7.8CVSS2AI score0.0044EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2015/03/29 11:16 p.m.•29 views

Netsparker 4 - Easier to Use, More Automation and Much More Web Security Checks

Netsparker Web Application Security Scanner version 4. The main highlight of this new version is the new fully automated Form Authentication mechanism; it does not require you to record anything, supports 2 factor authentication and other authentication mechanisms that require a one time code to...

7.7AI score
SaveExploits0
Rows per page
Query Builder