Lucene search
+L

55217 matches found

Vulnrichment
Vulnrichment
•added 2026/09/07 4:26 p.m.•12 views

CVE-2026-86488

In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved searches...

6.5CVSS5.8AI score0.0034EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/07 1:20 p.m.•14 views

CVE-2026-86417

Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates. The query always fetched User.email, while redaction happened only inside the non-REST rendering branch. As a result, the same authenticated user who saw redacted data in the normal...

5.3CVSS0.0027EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/09/07 1:03 p.m.•14 views

CVE-2026-86452 MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding

Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting. The users/forgot password-reset endpoint accepted an attacker-controlled email value without first imposing a reasonable length bound or...

8.7CVSS5.7AI score
SaveExploits0References4
CVE
CVE
•added 2026/09/07 1:03 p.m.•43 views

CVE-2026-86452

MISP versions ≤2.5.45 are affected by a vulnerability in unauthenticated mail endpoints, specifically the forgot password-reset and API-access request paths. The root cause is the absence of input length bounds, format validation, and rate limiting on these anonymous request paths, allowing an at...

8.7CVSS5.8AI score0.00542EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/09/07 11:17 a.m.•18 views

CVE-2026-86294

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument sitename/sitedesc leads to cross site scripting. Remot...

5.3CVSS0.0047EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/07 11:17 a.m.•16 views

CVE-2026-85640

Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component...

6.3CVSS0.0038EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/07 11:17 a.m.•14 views

CVE-2026-77699

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path...

5CVSS0.0029EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/07 11:17 a.m.•14 views

CVE-2026-77697

Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction...

6.3CVSS0.0038EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/07 10:49 a.m.•44 views

CVE-2026-77697 Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction...

6.3CVSS0.0038EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/07 10:49 a.m.•15 views

CVE-2026-77697 Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction...

6.3CVSS5.7AI score0.0038EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/07 10:49 a.m.•26 views

CVE-2026-77697

ManageEngine Endpoint Central (by Zohocorp) versions below 11.4.2540.23 are affected by a Privilege Escalation vulnerability during JAR extraction. The flaw allows a locally authenticated user with low privileges to escalate their permissions, with changed scope impacting the confidentiality, int...

6.3CVSS5.7AI score0.0038EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/07 10:49 a.m.•21 views

EUVD-2026-72340

Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction...

6.3CVSS5.6AI score0.0038EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/07 10:45 a.m.•18 views

EUVD-2026-72338

Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component...

6.3CVSS5.6AI score0.0038EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/07 10:45 a.m.•43 views

CVE-2026-85640 Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component...

6.3CVSS0.0038EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/07 10:45 a.m.•32 views

CVE-2026-85640

Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are affected by a Privilege Escalation Due to Outdated Component vulnerability. The CVSS 3.1 score is 6.3 (MEDIUM) with a local attack vector, low complexity, and low privileges required, resulting in low impact on confidentiality...

6.3CVSS5.7AI score0.0038EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/07 10:45 a.m.•15 views

CVE-2026-85640 Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component...

6.3CVSS5.7AI score0.0038EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/07 10:30 a.m.•17 views

CVE-2026-77699 Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path...

5CVSS5.8AI score0.0029EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/07 10:30 a.m.•22 views

CVE-2026-77699

ManageEngine Endpoint Central (Zohocorp) versions below 11.5.2605.01 are susceptible to a local privilege escalation caused by loading a DLL from an untrusted path . An attacker with low-level local access and the ability to prompt a user for interaction could exploit this to gain elevated privil...

5CVSS5.8AI score0.0029EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/07 10:30 a.m.•16 views

EUVD-2026-72337

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path...

5CVSS5.6AI score0.0029EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/07 10:30 a.m.•48 views

CVE-2026-77699 Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path...

5CVSS0.0029EPSS
SaveExploits0References1
Rows per page
Query Builder