Lucene search
+L

6622 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/02 12:00 a.m.•7 views

CVE-2026-29143: Improper Input Validation

SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of S/MIME-encrypted MIME entities, allowing an attacker to control trusted headers...

9.1CVSS5.8AI score0.00427EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/02 12:00 a.m.•5 views

CVE-2026-29131: Improper Neutralization of Special Elements used in an LDAP Query

SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to read the contents of emails encrypted for other users...

7.5CVSS5.8AI score0.00375EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/02 12:00 a.m.•34 views

PT-2026-29705

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-encrypted email...

6.3CVSS5.9AI score0.00195EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/02 12:00 a.m.•19 views

SEPPmail Secure Email Gateway 安全漏洞

SEPPmail Secure Email Gateway is an email security gateway developed by the German company SEPPmail. Versions of SEPPmail Secure Email Gateway prior to version 15.0.3 contained security vulnerabilities. These vulnerabilities allowed attackers to read the encrypted email content of other users...

7.5CVSS5.8AI score0.00375EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/02 12:00 a.m.•32 views

SEPPmail Secure Email Gateway 安全漏洞

SEPPmail Secure Email Gateway is an email security gateway developed by the German company SEPPmail. Versions of SEPPmail Secure Email Gateway prior to version 15.0.3 contained security vulnerabilities, which were due to allowing attackers to forge encrypted emails using GINA...

6.3CVSS5.8AI score0.00195EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/02 12:00 a.m.•21 views

SEPPmail Secure Email Gateway 安全漏洞

SEPPmail Secure Email Gateway is an email security gateway developed by the German company SEPPmail. Versions of SEPPmail Secure Email Gateway prior to version 15.0.3 contained security vulnerabilities. These vulnerabilities stemmed from improper validation of S/MIME encrypted MIME entities for...

9.1CVSS5.8AI score0.00427EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/02 12:00 a.m.•4 views

CVE-2026-29142: Missing Cryptographic Step

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-encrypted email...

6.3CVSS5.8AI score0.00195EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/02 12:00 a.m.•16 views

PT-2026-29946

nginx-ui Backup Restore Allows Tampering with Encrypted Backups in github.com/0xJacky/Nginx-UI...

5.8AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2026/04/01 10:57 p.m.•19 views

Moderate: Red Hat Security Advisory: nginx:1.24 security update

An update for the nginx:1.24 module is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.2CVSS6.8AI score0.00385EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/01 6:36 p.m.•20 views

EUVD-2026-17935

A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup files to access sensitive information. This vulnerability exists because authentication details are included in the encrypt...

6.5CVSS6.1AI score0.00293EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/01 5:28 p.m.•21 views

CVE-2026-20042

A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup files to access sensitive information. This vulnerability exists because authentication details are included in the encrypt...

6.5CVSS0.00293EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/01 4:27 p.m.•92 views

CVE-2026-20042

The CVE-2026-20042 issue affects Cisco Nexus Dashboard’s configuration backup feature. The root cause is that authentication details are stored in encrypted backup files, and an attacker with a valid backup file and the encryption password can decrypt the backup to retrieve sensitive information....

6.5CVSS7.1AI score0.00293EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/04/01 4:27 p.m.•37 views

CVE-2026-20042 Cisco Nexus Dashboard Configuration REST API Unauthorized Access Vulnerability

A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup files to access sensitive information. This vulnerability exists because authentication details are included in the encrypt...

6.5CVSS0.00293EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/01 4:27 p.m.•8 views

CVE-2026-20042 Cisco Nexus Dashboard Configuration REST API Unauthorized Access Vulnerability

A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup files to access sensitive information. This vulnerability exists because authentication details are included in the encrypt...

6.5CVSS7.1AI score0.00293EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/04/01 4:00 p.m.•106 views

Cisco Nexus Dashboard Configuration Backup REST API Unauthorized Access Vulnerability

A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup files to access sensitive information. This vulnerability exists because authentication details are included in the encrypt...

6.5CVSS6.1AI score0.00293EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/01 11:28 a.m.•9 views

CVE-2026-25601 Credential Exposure vulnerability in MEPIS RM

A vulnerability was identified in MEPIS RM, an industrial software product developed by Metronik. The application contained a hardcoded cryptographic key within the Mx.Web.ComponentModel.dll component. When the option to store domain passwords was enabled, this key was used to encrypt user...

6.4CVSS5.8AI score0.00149EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/01 11:28 a.m.•40 views

CVE-2026-25601

CVE-2026-25601 affects the MEPIS RM industrial software by storing domain passwords encrypted with a hardcoded cryptographic key found in Mx.Web.ComponentModel.dll. When users enable password storage, the embedded key encrypts passwords in the application database. An attacker with database acces...

6.7CVSS5.8AI score0.00149EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/04/01 11:28 a.m.•49 views

CVE-2026-25601 Credential Exposure vulnerability in MEPIS RM

A vulnerability was identified in MEPIS RM, an industrial software product developed by Metronik. The application contained a hardcoded cryptographic key within the Mx.Web.ComponentModel.dll component. When the option to store domain passwords was enabled, this key was used to encrypt user...

6.4CVSS0.00149EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/01 12:00 a.m.•24 views

Cisco Nexus Dashboard 信任管理问题漏洞

The Cisco Nexus Dashboard is a single console provided by the American company Cisco. It helps to simplify the operation and management of data center networks. The Cisco Nexus Dashboard has a vulnerability related to trust management. This vulnerability stems from the fact that encrypted backup...

6.5CVSS6AI score0.00293EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/31 10:58 p.m.•18 views

CVE-2026-33026

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui backup restore mechanism allows attackers to tamper with encrypted backup archives and inject malicious configuration during restoration. This issue has been patched in version 2.3.4...

9.4CVSS5.8AI score0.00211EPSS
SaveExploits1References1
Rows per page
Query Builder