Lucene search
+L

9689 matches found

NVD
NVD
added 2026/06/10 10:16 p.m.18 views

CVE-2026-0267

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the...

6.9CVSS0.00104EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/06/10 8:31 p.m.41 views

CVE-2026-0267 GlobalProtect App: Information Exposure Vulnerability on macOS

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the...

6.9CVSS0.00104EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/06/10 8:31 p.m.12 views

CVE-2026-0267 GlobalProtect App: Information Exposure Vulnerability on macOS

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the...

6.9CVSS5.5AI score0.00104EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/10 8:31 p.m.51 views

CVE-2026-0267

CVE-2026-0267 affects the Palo Alto Networks GlobalProtect app on macOS. It is described as an information exposure vulnerability where a local user can learn the passcodes used to disable, disconnect, or uninstall the app, enabling those actions despite configuration restrictions. The provided d...

6.9CVSS5.5AI score0.00104EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/06/10 12:00 a.m.27 views

PT-2026-48528

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the...

6.9CVSS5.5AI score0.00104EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/06/10 12:00 a.m.14 views

Use of RSA Algorithm without OAEP

Overview Affected versions of this package are vulnerable to Use of RSA Algorithm without OAEP via the Wss4jSecurityInterceptor class, in the Wss4jSecurityInterceptor.java file due to defaulting allowRSA15KeyTransportAlgorithm to true when building the validation RequestData. This overrides Apach...

6.3CVSS5.4AI score0.00129EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/06/10 12:00 a.m.30 views

Palo Alto Networks GlobalProtect app 日志信息泄露漏洞

The Palo Alto Networks GlobalProtect app is a network protection software developed by Palo Alto Networks. The GlobalProtect app for macOS has a vulnerability related to log information leakage. This vulnerability allows local users to obtain the configuration passwords necessary to disable,...

6.9CVSS5.3AI score0.00104EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/09 1:09 p.m.9 views

CVE-2026-11790

A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does not enforce an upper bound on the iteration count extracted from stored password hashes. A privileged attacker who can modify a user's password hash can cause excessive CPU consumption during authentication,...

4.9CVSS5.4AI score0.00291EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/06/09 1:09 p.m.6 views

CVE-2026-11792

A heap buffer overflow flaw was found in 389 Directory Server. When audit logging is enabled, the createmaskedentrystring function in auditlog.c copies a fixed-length password mask into a precisely-sized heap buffer without checking available space. If a short cleartext password is logged requiri...

3.3CVSS5.6AI score0.00258EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/06/09 1:02 p.m.6 views

CVE-2026-11789

A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than 16 bytes, causing a buffer over-read that crashes the LDAP server during authentication. Mitigation Disable...

6.5CVSS5.8AI score0.00282EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/06/09 12:09 a.m.26 views

Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections

Impact Puma is vulnerable to source IP spoofing when setremoteaddress proxyprotocol: :v1 is enabled and persistent connections are used. PROXY protocol v1 is a connection-level protocol. Support was added to Puma in v5.5.0. A proxy sends one PROXY header at the beginning of a TCP connection, befo...

7.5CVSS5.5AI score0.00266EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/08 11:55 p.m.57 views

Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion

Impact PROXY protocol support for Puma was added in version 5.5.0. When PROXY protocol v1 support is enabled, Puma reads incoming bytes into an internal buffer. It waits for "\r\n" to determine whether a PROXY v1 line is present. If an attacker opens a TCP connection and continuously sends bytes...

7.5CVSS5.8AI score0.0063EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2026/06/08 5:16 p.m.25 views

CVE-2026-46292

In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual devices in genpd If a device is attached to a PM domain through genpddevpmattachbyid, genpd calls pmruntimeenable for the corresponding virtual device that it registers. While this...

5.5CVSS0.00123EPSS
SaveExploits0References8
OSV
OSV
added 2026/06/08 5:16 p.m.19 views

UBUNTU-CVE-2026-46292

In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual devices in genpd If a device is attached to a PM domain through genpddevpmattachbyid, genpd calls pmruntimeenable for the corresponding virtual device that it registers. While this...

5.5CVSS5.4AI score0.00123EPSS
SaveExploits0References30
Cvelist
Cvelist
added 2026/06/08 3:46 p.m.53 views

CVE-2026-46292 pmdomain: core: Fix detach procedure for virtual devices in genpd

In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual devices in genpd If a device is attached to a PM domain through genpddevpmattachbyid, genpd calls pmruntimeenable for the corresponding virtual device that it registers. While this...

0.00123EPSS
SaveExploits0References8
OSV
OSV
added 2026/06/08 3:46 p.m.11 views

CVE-2026-46292 pmdomain: core: Fix detach procedure for virtual devices in genpd

In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual devices in genpd If a device is attached to a PM domain through genpddevpmattachbyid, genpd calls pmruntimeenable for the corresponding virtual device that it registers. While this...

5.8AI score
SaveExploits0References11
ATTACKERKB
ATTACKERKB
added 2026/06/08 3:46 p.m.13 views

CVE-2026-46292

In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual devices in genpd If a device is attached to a PM domain through genpddevpmattachbyid, genpd calls pmruntimeenable for the corresponding virtual device that it registers. While this...

5.5AI score0.00123EPSS
SaveExploits0References9Affected Software1
CVE
CVE
added 2026/06/08 3:05 p.m.65 views

CVE-2026-46657

Bludit CMS prior to 3.22.0 has a vulnerability in user management: when an administrator disables a user, tokenAuth and tokenRemember in the JSON database are not invalidated. As a result, users with an existing Remember Me cookie can bypass disablement and remain authenticated. This issue impact...

7.1CVSS5.5AI score0.00271EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/06/08 3:05 p.m.14 views

CVE-2026-46657

Bludit is a content management system. Versions prior to 3.22.0 have a vulnerability in the user management logic that allows deactivated accounts to maintain access via persistent authentication tokens. When an administrator disables a user account, the application fails to invalidate or clear t...

7.1CVSS5.5AI score0.00271EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/06/08 12:00 a.m.29 views

PT-2026-47625

Name of the Vulnerable Software and Affected Versions Puma versions prior to 7.2.1 Puma versions prior to 8.0.2 Description When PROXY protocol v1 support is enabled, the server reads incoming bytes into an internal buffer and waits for a carriage return and line feed CRLF to identify a PROXY v1...

7.5CVSS5.6AI score0.0063EPSS
SaveExploits0References11
Rows per page
Query Builder