Lucene search
+L

14627 matches found

BDU FSTEC
BDU FSTEC
added 14 minutes ago34 views

Blitz Identity Provider (Authentication server)

...

5.8AI score
SaveExploits0
Nuclei
Nuclei
added 7 hours ago40 views

FortiOS - Insecure LDAP Configuration Detection

The FortiGate LDAP configuration was detected to be insecure due to missing ca-cert, secure LDAPS, or server-identity-check, potentially exposing LDAP communications to credential interception or man-in-the-middle attacks under specific network conditions. id: CVE-2019-5591 info: name: FortiOS -...

6.5CVSS7.3AI score0.18422EPSS
SaveExploits1References2
Nuclei
Nuclei
added 7 hours ago76 views

Zitadel - User Registration Bypass

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...

7.5CVSS7.4AI score0.02518EPSS
SaveExploits0References2
Nuclei
Nuclei
added 7 hours ago31 views

VMware Workspace ONE Access - Authentication Bypass

VMware Workspace ONE Access has two authentication bypass vulnerabilities CVE-2022-22955 & CVE-2022-22956 in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework. id: CVE-2022-22956...

9.8CVSS8.8AI score0.50694EPSS
SaveExploits5References4
Nuclei
Nuclei
added 7 hours ago33 views

Shibboleth OIDC OP <3.0.4 - Server-Side Request Forgery

The Shibboleth Identity Provider OIDC OP plugin before 3.0.4 is vulnerable to server-side request forgery SSRF due to insufficient restriction of the requesturi parameter, which allows attackers to interact with arbitrary third-party HTTP services. id: CVE-2022-24129 info: name: Shibboleth OIDC O...

8.2CVSS7.9AI score0.06139EPSS
SaveExploits1References5
Nuclei
Nuclei
added 7 hours ago101 views

WSO2 - Cross-Site Scripting

WSO2 contains a reflected cross-site scripting vulnerability in the Management Console of API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0,...

6.1CVSS5.9AI score0.41078EPSS
SaveExploits5References5
CVE
CVE
added yesterday39 views

CVE-2026-48791

CVE-2026-48791 affects dev.sigstore:sigstore-java:2.0.0. The vulnerability arises from missing verification of the integratedTime (Rekor) against the Fulcio certificate during bundle verification, later re-added with fixes in 2.1.0. The issue is limited to users verifying bundles with 2.0.0; 2.1....

2CVSS5.4AI score
SaveExploits0References5
NVD
NVD
added yesterday4 views

CVE-2026-13267

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow an authenticated user to gain privileges of another user via a specially crafted request...

8.1CVSS
SaveExploits0References1
NVD
NVD
added yesterday5 views

CVE-2026-12005

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 contains a input validation vulnerability in the management interface that allows already privileged attackers to execute additional...

7.2CVSS
SaveExploits0References1
NVD
NVD
added yesterday5 views

CVE-2026-12618

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied input...

7.2CVSS
SaveExploits0References1
NVD
NVD
added yesterday5 views

CVE-2026-12359

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow a remote attacker to access sensitive information due to an inconsistent interpretation of an HTTP request by a reverse prox...

8.1CVSS
SaveExploits0References1
NVD
NVD
added yesterday5 views

CVE-2026-12004

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 contains a format string injection vulnerability in the management interface that allows attackers to cause denial of service and...

8.7CVSS
SaveExploits0References1
CVE
CVE
added yesterday19 views

CVE-2026-11932

CVE-2026-11932 affects IBM Security Verify Access 10.0–10.0.9.2, IBM Verify Identity Access 11.0–11.0.3, and IBM Verify Identity Access Container 11.0–11.0.3 (also Verify Access Container 10.0–10.0.9.2). A denial-of-service vulnerability is identified in these products. CVSS Base score is 5.3 (Ne...

5.3CVSS5.2AI score
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-57548

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 is vulnerable to a denial of service attack...

5.3CVSS5.2AI score
SaveExploits0References1
CVE
CVE
added yesterday20 views

CVE-2026-17616

CVE-2026-17616 affects IBM Security Verify Access (10.0–10.0.9.2), IBM Verify Identity Access (11.0–11.0.3), IBM Verify Identity Access Container (11.0–11.0.3), and IBM Security Verify Access Container (10.0–10.0.9.2). In certain configurations, the Reverse Proxy may provide weaker than expected ...

6.8CVSS5.2AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday17 views

CVE-2026-17616 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data...

6.8CVSS
SaveExploits0References1
EUVD
EUVD
added yesterday7 views

EUVD-2026-57543

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow a remote attacker to access sensitive information due to an inconsistent interpretation of an HTTP request by a reverse prox...

8.1CVSS5.3AI score
SaveExploits0References1
CVE
CVE
added yesterday18 views

CVE-2026-12359

Summary: CVE-2026-12359 affects IBM Security Verify Access and IBM Verify Identity Access families (and containers) with versions 10.0–10.0.9.2, 11.0–11.0.3, and corresponding containers. Affected component is the reverse proxy’s handling of HTTP requests, described as an inconsistent interpretat...

8.1CVSS5.3AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-12359

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow a remote attacker to access sensitive information due to an inconsistent interpretation of an HTTP request by a reverse prox...

8.1CVSS5.3AI score
SaveExploits0References2Affected Software4
CVE
CVE
added yesterday18 views

CVE-2026-11923

IBM Security Verify Access (10.0–10.0.9.2), IBM Verify Identity Access (11.0–11.0.3), and IBM Verify Identity Access Container (11.0–11.0.3) reverse proxy configurations may provide weaker than expected cryptographic validation of user-supplied data, per CVE-2026-11923. Root cause: cryptographic ...

7.4CVSS5.2AI score
SaveExploits0References1
Rows per page
Query Builder