Lucene search
K

1101 matches found

NVD
NVD
added 2026/06/11 12:16 p.m.11 views

CVE-2026-4764

A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was...

9.4CVSS0.00207EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/06/11 10:13 a.m.10 views

CVE-2026-4764 Privilege Escalation in Dialogflow CX via Playbook Import

A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was...

9.4CVSS5.5AI score0.00207EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/06/11 10:13 a.m.25 views

CVE-2026-4764 Privilege Escalation in Dialogflow CX via Playbook Import

A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was...

9.4CVSS0.00207EPSS
Exploits0References1
EUVD
EUVD
added 2026/06/11 10:13 a.m.8 views

EUVD-2026-36221

A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was...

9.4CVSS5.5AI score0.00207EPSS
Exploits0References1
CVE
CVE
added 2026/06/11 10:13 a.m.13 views

CVE-2026-4764

The CVE reports a Missing Authorization in Dialogflow CX’s playbook import on Google Cloud Platform. An authenticated user with specific roles can escalate privileges via a malicious playbook import, potentially taking over a GCP project. The issue affects Dialogflow CX playbook import functional...

9.4CVSS5.5AI score0.00207EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/06/11 12:0 a.m.7 views

PT-2026-48647

A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was...

9.4CVSS5.5AI score0.00207EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/06/11 12:0 a.m.10 views

Google Cloud Platform Dialogflow CX 安全漏洞

Google Cloud Platform Dialogflow CX is a conversational AI development platform based on natural language understanding and generation technology, provided by Google, Inc. There is a security vulnerability in Google Cloud Platform Dialogflow CX. This vulnerability stems from the lack of...

9.4CVSS5.3AI score0.00207EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.8 views

CODESYS多款产品 安全漏洞

CODESYS Control and others are products of the German company CODESYS. CODESYS Control is a set of industrial control programming software. CODESYS is an industrial control automation software. CODESYS HMI is a visualization software. Several CODESYS products have security vulnerabilities. These...

8.7CVSS5.9AI score0.00445EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.9 views

CODESYS多款产品 安全漏洞

CODESYS and others are products of the German CODESYS company. CODESYS is an industrial control automation software. CODESYS HMI is a visualization software. CODESYS Control RTE is a high-performance programmable controller. Several CODESYS products have security vulnerabilities; these...

8.1CVSS5.9AI score0.00348EPSS
Exploits0References1
OSV
OSV
added 2026/05/11 2:1 p.m.1 views

MINI-64CX-G2CR-3HGW

Bulletin has no description...

5.3CVSS5.7AI score0.0039EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/03/26 3:11 p.m.3 views

CVE-2026-23817

A vulnerability in the web-based management interface of AOS-CX Switches could allow an unauthenticated remote attacker to redirect users to an arbitrary URL...

6.5CVSS5.9AI score0.00288EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:3 p.m.4 views

CVE-2026-23813

A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable resetting the admin password...

9.8CVSS6.8AI score0.00726EPSS
Exploits1References1
EUVD
EUVD
added 2026/03/11 6:31 a.m.3 views

EUVD-2026-11080

A vulnerability in the command parameters of a certain AOS-CX CLI command could allow a low-privilege authenticated remote attacker to inject malicious commands resulting in unwanted behavior...

8.8CVSS5.8AI score0.0055EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/11 6:31 a.m.1 views

EUVD-2026-11075

A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute unauthorized commands...

7.2CVSS5.9AI score0.00938EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/11 6:31 a.m.3 views

EUVD-2026-11077

A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system...

7.2CVSS6.1AI score0.00671EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/11 6:31 a.m.6 views

EUVD-2026-11079

A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable resetting the admin password...

9.8CVSS5.8AI score0.00726EPSS
Exploits1References2
EUVD
EUVD
added 2026/03/11 6:31 a.m.5 views

EUVD-2026-11076

A vulnerability in the web-based management interface of AOS-CX Switches could allow an unauthenticated remote attacker to redirect users to an arbitrary URL...

6.5CVSS5.9AI score0.00288EPSS
Exploits0References2
NVD
NVD
added 2026/03/11 4:17 a.m.2 views

CVE-2026-23815

A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute unauthorized commands...

7.2CVSS0.00938EPSS
Exploits0References1
NVD
NVD
added 2026/03/11 4:17 a.m.4 views

CVE-2026-23817

A vulnerability in the web-based management interface of AOS-CX Switches could allow an unauthenticated remote attacker to redirect users to an arbitrary URL...

6.5CVSS0.00288EPSS
Exploits0References1
NVD
NVD
added 2026/03/11 4:17 a.m.4 views

CVE-2026-23816

A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system...

7.2CVSS0.00671EPSS
Exploits0References1
Rows per page
Query Builder