Lucene search
+L

70030 matches found

OSV
OSV
added 2026/08/17 1:39 p.m.11 views

MINI-MJVC-Q92V-QG9F

Bulletin has no description...

5.9CVSS5AI score0.00518EPSS
SaveExploits0
OSV
OSV
added 2026/08/17 1:39 p.m.9 views

MINI-79MX-RV28-327G

Bulletin has no description...

6.1CVSS5AI score0.0031EPSS
SaveExploits0
OSV
OSV
added 2026/08/17 1:39 p.m.7 views

MINI-52H7-93VR-9WP7

Bulletin has no description...

7.5CVSS5AI score0.00568EPSS
SaveExploits0
OSV
OSV
added 2026/08/17 1:39 p.m.8 views

MINI-54HP-7QCP-GPVF

Bulletin has no description...

6.1CVSS5AI score0.0031EPSS
SaveExploits0
OSV
OSV
added 2026/08/17 1:39 p.m.7 views

MINI-5WFC-C964-QF34

Bulletin has no description...

5.9CVSS5AI score0.00518EPSS
SaveExploits0
OSV
OSV
added 2026/08/17 1:39 p.m.6 views

MINI-Q6P8-MXXH-HFJJ

Bulletin has no description...

6.1CVSS5AI score0.0031EPSS
SaveExploits0
OSV
OSV
added 2026/08/17 1:38 p.m.8 views

MINI-PXW3-PRM3-X9R5

Bulletin has no description...

5.9CVSS5AI score0.00518EPSS
SaveExploits0
OSV
OSV
added 2026/08/17 1:38 p.m.10 views

MINI-9WC9-MH66-5QMQ

Bulletin has no description...

5.9CVSS5AI score0.00518EPSS
SaveExploits0
NVD
NVD
added 2026/08/17 1:16 p.m.12 views

CVE-2026-14564

Insufficiently Protected Credentials vulnerability in Innotim Software Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Retrieve Embedded Sensitive Data. This issue affects Logsign SIEM: from 6.4.97 before 6.4.114...

9CVSS0.00238EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/17 1:16 p.m.7 views

UBUNTU-CVE-2026-75002

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count desynchronization could lead to information disclosure or privilege escalation via IMAP command injection...

7.1CVSS5.3AI score0.01356EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/17 12:26 p.m.41 views

CVE-2026-14564 Sensitive Data Exposure in Innotim Software's Logsign SIEM

Insufficiently Protected Credentials vulnerability in Innotim Software Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Retrieve Embedded Sensitive Data. This issue affects Logsign SIEM: from 6.4.97 before 6.4.114...

9CVSS0.00238EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/17 12:26 p.m.41 views

CVE-2026-14564

An Insufficiently Protected Credentials flaw in Logsign SIEM (versions 6.4.97 through 6.4.113) allows authenticated users with high privileges to retrieve embedded sensitive data. The vulnerability carries a CVSS 9.0 Critical rating (AV:N/AC:L/PR:H/S:C/C:H/I:H/A:L). Upgrade to Logsign SIEM 6.4.11...

9CVSS5.3AI score0.00238EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/17 12:26 p.m.13 views

EUVD-2026-60161

Insufficiently Protected Credentials vulnerability in Innotim Software Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Retrieve Embedded Sensitive Data. This issue affects Logsign SIEM: from 6.4.97 before 6.4.114...

9CVSS5.3AI score0.00238EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2026/08/17 11:58 a.m.13 views

How MCP Servers Can Expose Enterprise Secrets

MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned access and prompt injection, often before security teams even know the server is running. As more organizations adopt AI agents into their systems, that exposure can silently become a major gap in M...

9.6CVSS7.3AI score0.77866EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/17 11:04 a.m.19 views

EUVD-2026-60116

opensslencrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExecutor that exposes Python type objects in restricted exec builtins. Attackers can traverse the Python class hierarchy via class.mro.subclasses to access system functions and execute arbitrary OS comman...

9.8CVSS5.7AI score0.00491EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/08/17 11:04 a.m.17 views

EUVD-2026-60110

opensslencrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network can access PostgreSQL databases using well-known default credentials to retrieve sensitive data...

9.8CVSS5.3AI score0.00284EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/17 11:04 a.m.65 views

CVE-2026-74891 openssl_encrypt before 1.4.0 Hardcoded Database Credentials

opensslencrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network can access PostgreSQL databases using well-known default credentials to retrieve sensitive data...

9.8CVSS0.00284EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/17 11:04 a.m.14 views

CVE-2026-74891 openssl_encrypt before 1.4.0 Hardcoded Database Credentials

opensslencrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network can access PostgreSQL databases using well-known default credentials to retrieve sensitive data...

8.7CVSS5.5AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/17 11:04 a.m.60 views

CVE-2026-74880 openssl_encrypt before 1.4.0 Token Leakage via Query Parameters

opensslencrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser history, and HTTP Referer headers to gain unauthorized access...

9.8CVSS0.00307EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/17 11:04 a.m.14 views

CVE-2026-74879 openssl_encrypt before 1.4.0 Information Disclosure via /ready endpoint

opensslencrypt versions before 1.4.0 contain an information disclosure vulnerability in the /ready endpoint that returns full database exception strings to unauthenticated callers. Attackers can trigger database errors to extract sensitive information including hostnames, IP addresses, connection...

8.7CVSS5.4AI score
SaveExploits0References4
Rows per page
Query Builder