Lucene search
+L

29835 matches found

Vulnrichment
Vulnrichment
•added 2026/06/02 7:08 p.m.•24 views

CVE-2026-10584 HTTPS Fallback to HTTP in Graph Explorer

Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive information via interception of requests intended to be sent over HTTPS. To remediate this issue, users should upgrade to Graph Explorer...

8.2CVSS5.9AI score0.00101EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/06/02 7:08 p.m.•15 views

CVE-2026-10584

Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive information via interception of requests intended to be sent over HTTPS. To remediate this issue, users should upgrade to Graph Explorer...

8.2CVSS5.9AI score0.00101EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/06/02 7:08 p.m.•59 views

CVE-2026-10584 HTTPS Fallback to HTTP in Graph Explorer

Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive information via interception of requests intended to be sent over HTTPS. To remediate this issue, users should upgrade to Graph Explorer...

8.2CVSS0.00101EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/02 7:08 p.m.•95 views

CVE-2026-10584

Graph Explorer before 3.0.1 uses an HTTP fallback when certificate files are missing, exposing potential interception of HTTPS requests. The vulnerability affects the proxy component of Graph Explorer and can lead to disclosure of sensitive information. The recommended remediations are to upgrade...

8.2CVSS5.9AI score0.00101EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/06/02 7:08 p.m.•23 views

CVE-2026-10584 HTTPS Fallback to HTTP in Graph Explorer

Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive information via interception of requests intended to be sent over HTTPS. To remediate this issue, users should upgrade to Graph Explorer...

8.2CVSS6AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/06/02 7:08 p.m.•34 views

EUVD-2026-34011

Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive information via interception of requests intended to be sent over HTTPS. To remediate this issue, users should upgrade to Graph Explorer...

8.2CVSS5.9AI score0.00101EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/06/02 12:31 a.m.•29 views

EUVD-2019-20154

Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk mode and access the underlying operating system through a specific dialog interaction. Attackers can exploit this kiosk escape to take control of the operating system and cause...

8.6CVSS5.8AI score0.00118EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/02 12:00 a.m.•29 views

Graph Explorer security vulnerabilities

Graph Explorer is an interactive web application for visual exploration of graph databases, open-sourced by Amazon Web Services. Previous versions of Graph Explorer, such as 3.0.1, contained security vulnerabilities. These vulnerabilities stemmed from the proxy server falling back to HTTP when th...

8.2CVSS5.8AI score0.00101EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/02 12:00 a.m.•6 views

CVE-2026-10584: Cleartext Transmission of Sensitive Information

Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive information via interception of requests intended to be sent over HTTPS. To remediate this issue, users should upgrade to Graph Explorer...

8.2CVSS5.9AI score0.00101EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/02 12:00 a.m.•35 views

PT-2026-45817

Name of the Vulnerable Software and Affected Versions Graph Explorer versions prior to 3.0.1 Description The proxy server falls back to HTTP when certificate files are missing. This behavior may allow remote threat actors to intercept requests intended for HTTPS and obtain sensitive information...

8.2CVSS5.8AI score0.00101EPSS
SaveExploits0References4
NVD
NVD
•added 2026/06/01 11:16 p.m.•29 views

CVE-2019-25718

Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk mode and access the underlying operating system through a specific dialog interaction. Attackers can exploit this kiosk escape to take control of the operating system and cause...

8.6CVSS0.00118EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/01 10:03 p.m.•38 views

CVE-2026-10173

A weakness has been identified in Orthanc Explorer 2 up to 1.12.0. The impacted element is an unknown function of the file WebApplication/src/components/StudyList.vue of the component URL Handler. This manipulation of the argument remote-source causes cross site scripting. It is possible to...

5.3CVSS3.9AI score0.00278EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/01 9:41 p.m.•20 views

CVE-2019-25718 Dräger Infinity Explorer C700 Privilege Escalation via Kiosk Mode Bypass

Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk mode and access the underlying operating system through a specific dialog interaction. Attackers can exploit this kiosk escape to take control of the operating system and cause...

8.6CVSS5.9AI score0.00118EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/06/01 9:41 p.m.•14 views

CVE-2019-25718

Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk mode and access the underlying operating system through a specific dialog interaction. Attackers can exploit this kiosk escape to take control of the operating system and cause...

8.6CVSS5.8AI score0.00118EPSS
SaveExploits0References4
CVE
CVE
•added 2026/06/01 9:41 p.m.•44 views

CVE-2019-25718

Affected product: Dräger Infinity Explorer C700. Vulnerability: privilege escalation allowing kiosk-mode escape to reach the underlying OS via a specific dialog interaction. Impact: attacker can break out of kiosk mode, gain OS control, and cause the Delta Family patient monitor display to show i...

8.6CVSS5.9AI score0.00118EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/06/01 9:41 p.m.•55 views

CVE-2019-25718 Dräger Infinity Explorer C700 Privilege Escalation via Kiosk Mode Bypass

Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk mode and access the underlying operating system through a specific dialog interaction. Attackers can exploit this kiosk escape to take control of the operating system and cause...

8.6CVSS0.00118EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•25 views

Dräger Infinity Explorer C700 security vulnerability

The Dräger Infinity Explorer C700 is an integrated medical-grade monitoring workstation component developed by the German company Dräger. The Dräger Infinity Explorer C700 has a security vulnerability that stems from privilege escalation. This vulnerability could allow attackers to break through...

8.6CVSS5.9AI score0.00118EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/01 12:00 a.m.•11 views

CVE-2019-25718: User Interface (UI) Misrepresentation of Critical Information

Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk mode and access the underlying operating system through a specific dialog interaction. Attackers can exploit this kiosk escape to take control of the operating system and cause...

8.6CVSS5.9AI score0.00118EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2026/06/01 12:00 a.m.•23 views

SAP HANA Cockpit Database Explorer Data Compromise

The vulnerability of SAP HANA Cockpit and SAP HANA Database Explorer tools is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality of the protected information...

5CVSS6.6AI score0.00346EPSS
SaveExploits2References3Affected Software1
NVD
NVD
•added 2026/05/31 8:16 a.m.•31 views

CVE-2026-10173

A weakness has been identified in Orthanc Explorer 2 up to 1.12.0. The impacted element is an unknown function of the file WebApplication/src/components/StudyList.vue of the component URL Handler. This manipulation of the argument remote-source causes cross site scripting. It is possible to...

5.3CVSS0.00278EPSS
SaveExploits0References6
Rows per page
Query Builder