Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:48 p.m.6 views

CVE-2026-9246

Improper access control in the entry documentation and attachment features in Devolutions Server allows an authenticated user with vault read access to retrieve the documentation and attachments of sealed entries via a crafted API request. This issue affects : Devolutions Server 2026.1.6.0 throug...

4.3CVSS5.4AI score0.00031EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/22 3:26 p.m.12 views

CVE-2026-9246

Improper access control in the entry documentation and attachment features in Devolutions Server allows an authenticated user with vault read access to retrieve the documentation and attachments of sealed entries via a crafted API request. This issue affects : Devolutions Server 2026.1.6.0 throug...

5.8AI score0.00031EPSS
Exploits0References1
CVE
CVE
added 2026/05/22 3:26 p.m.19 views

CVE-2026-9246

CVE-2026-9246 : Improper access control in Devolutions Server’s entry documentation and attachment features allows an authenticated user with vault read access to retrieve documentation and attachments of sealed entries via a crafted API request. Affected: Devolutions Server 2026.1.6.0–2026.1.16....

4.3CVSS5.8AI score0.00031EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/04/28 1:11 p.m.28 views

CVE-2026-6706

Improper access control in the vault documentation feature in Devolutions Server allows an authenticated attacker to read documentation content from unauthorized vaults via a crafted API request. This issue affects Server: from 2026.1.6.0 through 2026.1.14.0, through 2025.3.18.0...

0.00038EPSS
Exploits0References1
CVE
CVE
added 2026/04/28 1:11 p.m.7 views

CVE-2026-6706

CVE-2026-6706 involves an improper access control flaw in the vault documentation feature of Devolutions Server up to 2026.1.14.0. An authenticated attacker can read documentation content from unauthorized vaults via a crafted API request. Affected component: vault documentation feature; root cau...

6.5CVSS5.2AI score0.00038EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.4 views

PT-2026-20730

Missing Authorization vulnerability in echoplugins Knowledge Base for Documentation, FAQs with AI Assistance echo-knowledge-base allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knowledge Base for Documentation, FAQs with AI Assistance: from n/a through =...

5.5AI score0.00039EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-19518

Malware in sbrugna...

5.3CVSS5.3AI score0.00413EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-32746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Between versions 2.3.0 and 2.8.2, the doc module of Icinga Web 2...

5.3CVSS6.1AI score0.00413EPSS
Exploits1References3
Cvelist
Cvelist
added 2001/01/22 5:0 a.m.25 views

CVE-2000-1016

The default configuration of Apache httpd.conf on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL...

6.5AI score0.04264EPSS
Exploits1References3
Rows per page
Query Builder