CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

Rapid7 Vulnerability Database (full)•added 2026/07/15 12:00 a.m.•2 views

CVE-2026-53444: Improper Privilege Management

Wekan is open source kanban built with Meteor. Prior to 9.32, Wekan OIDC-related Meteor methods in packages/wekan-oidc/oidcserver.js, server/models/org.js, and server/models/team.js are globally callable without the admin authorization checks used by their non-OIDC counterparts. Authenticated use...

7.6CVSS5.8AI score0.00414EPSS

SaveExploits0References3

OSV•added 2022/05/24 5:17 p.m.•12 views

GHSA-CHGW-36XV-47CW OpenStack Keystone EC2 and/or credential endpoints are not protected from a scoped context

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any user authenticated within a limited scope trust/oauth/application credential can create an EC2 credential with an escalated permission, such as obtaining admin while the user is on a limited viewer role. This potentially...

8.8CVSS8.4AI score0.01562EPSS

SaveExploits0References10

OSV•added 2020/05/07 12:15 a.m.•28 views

CVE-2020-12691

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any authenticated user can create an EC2 credential for themselves for a project that they have a specified role on, and then perform an update to the credential user and project, allowing them to masquerade as another user...

8.8CVSS8.6AI score

SaveExploits0References7

OSV•added 2020/05/07 12:15 a.m.•33 views

CVE-2020-12689

8.8CVSS8.5AI score

SaveExploits0References6

Prion•added 2020/05/07 12:15 a.m.•30 views

Code injection

6.5CVSS8.3AI score0.01562EPSS

SaveExploits0References6Affected Software2

Rapid7 Vulnerability Database (full)•added 2020/05/06 12:00 a.m.•3 views

CVE-2020-12691: Incorrect Authorization

8.8CVSS7.6AI score0.04918EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by