Lucene search
+L

174 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/10 12:00 a.m.•1 views

CVE-2026-19381: Improper Privilege Management

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLibKSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locall...

8.5CVSS6.6AI score0.00162EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/17 12:00 a.m.•23 views

Anviz CrossChex Standard 安全漏洞

Anviz CrossChex Standard is a centralized control software developed by Anviz Corporation in the United States, used for access control and attendance data management. Anviz CrossChex Standard has a security vulnerability. This vulnerability arises from the ability of attackers to manipulate the...

7.5CVSS5.8AI score0.00344EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/16 12:00 a.m.•30 views

Simopro WinMatrix 安全漏洞

Simopro WinMatrix is an industrial control software developed by Simopro Company in Taiwan, China. Simopro WinMatrix has a security vulnerability that stems from the lack of authentication, which may allow for the execution of arbitrary code...

9.3CVSS6AI score0.00182EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/13 9:20 p.m.•31 views

EUVD-2026-12174

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, A logic error in the PX4 Autopilot MAVLink FTP session validation uses incorrect boolean logic && instead of ||, allowing BurstReadFile and WriteFile operations to proceed with invalid sessions or closed file descriptors...

4.3CVSS5.8AI score0.00295EPSS
SaveExploits1References1
OSV
OSV
•added 2026/02/09 4:15 a.m.•14 views

CVE-2025-66603

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts the OPTIONS method. An attacker could potentially use this information to carry out other attacks. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN, UNSVRN,...

9.8CVSS5.7AI score0.00277EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:32 p.m.•19 views

CVE-2023-31502

Altenergy Power Control Software C1.2.5 was discovered to contain a remote code execution RCE vulnerability via the component /models/managementmodel.php...

7.2CVSS8.4AI score0.00698EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/12/24 12:00 a.m.•21 views

Advantech WebAccess/SCADA Code Issue Vulnerability

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. A code issue vulnerability exists in Advantech...

9.8CVSS6.2AI score0.00624EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/04 12:00 a.m.•16 views

Remotecontrolio Remote Keyboard Desktop 操作系统命令注入漏洞

Remotecontrolio Remote Keyboard Desktop is a remote control application from Remotecontrolio. An operating system command injection vulnerability exists in Remotecontrolio Remote Keyboard Desktop version 1.0.1, which stems from a flaw in the rundll32.exe export function that could lead to...

9.8CVSS8.1AI score0.01253EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2025/12/01 12:00 a.m.•20 views

The vulnerability of software solutions for centralized control of Wago Device Sphere controllers lies in the insecure initialization of resources. This allows a malicious actor to gain full access to the tool and all connected devices.

The vulnerability of the software solutions for centralized control of Wago Device Sphere controllers is related to improper session management. Exploiting this vulnerability can allow a malicious actor to gain full access to the tool and all connected devices...

10CVSS5.8AI score0.00377EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2015-2228

Malware in sbrugna...

4CVSS5.8AI score0.01145EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-19737

Malware in sbrugna...

9.8CVSS9.2AI score0.01011EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2020-4315

Malware in sbrugna...

8.1CVSS7.5AI score0.02805EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2019-2910

Malware in sbrugna...

8.8CVSS7.9AI score0.01372EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•29 views

EUVD-2024-33718

Malicious code in bioql PyPI...

6.9CVSS5.6AI score0.00548EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/09/24 12:00 a.m.•18 views

The vulnerability of the Tenable Network Monitor security control software, related to access control errors, allows a perpetrator to increase their privileges.

The vulnerability of the Tenable Network Monitor security control tool is related to access control errors. Exploiting this vulnerability could allow an attacker to increase their privileges...

7.8CVSS7.5AI score0.00161EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/09/22 12:00 a.m.•14 views

The vulnerability of DTN Soft’s industrial control software lies in its deserialization mechanism flaws, allowing attackers to execute arbitrary code.

The vulnerability of DTN Soft’s software for industrial control systems is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7.4AI score0.00306EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
•added 2025/08/30 12:00 a.m.•11 views

NetSupport Manager 安全漏洞

NetSupport Manager is a remote control software from NetSupport Manager, Inc. A security vulnerability exists in NetSupport Manager versions prior to 14.12.0000 that stems from a stack buffer overflow that could result in a denial of service or memory disclosure...

8.8CVSS7AI score0.00497EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/08/04 12:00 a.m.•21 views

Intelbras InControl 访问控制错误漏洞

Intelbras InControl is an access control management software from Intelbras that allows users to easily manage any ingress and egress traffic using access control devices. An access control error vulnerability exists in Intelbras InControl version 2.21.60.9, which stems from improper handling of...

3.7CVSS4AI score0.0028EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/07/04 12:00 a.m.•16 views

PT-2025-27885 · Unknown · Amazewp Fluxtore

Name of the Vulnerable Software and Affected Versions: amazewp fluXtore versions 1.6.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For amazewp...

5.3CVSS6.1AI score0.00248EPSS
SaveExploits0References3
OSV
OSV
•added 2025/06/13 6:12 a.m.•15 views

BIT-MOODLE-2024-48900 Moodle: idor when accessing list of badge recipients

A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to...

4.3CVSS4.3AI score0.0035EPSS
SaveExploits0References2
Rows per page
Query Builder