Lucene search
+L

151873 matches found

CVE
CVE
added 2026/08/21 8:37 p.m.16 views

CVE-2026-30865

Combodo iTop , a web-based IT service management tool, is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the dashboard save functionality . The flaw allows an attacker to craft a malicious URL that, when clicked by a victim, executes arbitrary script in the victim's browser c...

7.1CVSS5.2AI score
SaveExploits0References2
NVD
NVD
added 2026/08/21 8:16 p.m.5 views

CVE-2026-30819

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop has a reflected Cross-Site Scripting XSS vulnerability in its dashboard revert functionality with the parameter dashboardid in /pages/ajax.render.php. This issue has been fixed in version 3.2.3...

7.3CVSS
SaveExploits0References2
CVE
CVE
added 2026/08/21 8:15 p.m.11 views

CVE-2026-30826

Combodo iTop is a web-based IT service management tool. Prior to version 3.2.3 , a Reflected Cross-Site Scripting (XSS) vulnerability exists in the testing OQL query functionality of run_query.php. An attacker with low privileges can craft a malicious link that, when clicked by a user, executes a...

8CVSS5.2AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/21 8:15 p.m.21 views

CVE-2026-30826 Combodo iTop: Reflected XSS in run_query.php

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting XSS vulnerability in the testing OQL query functionality. This issue has been fixed in version 3.2.3...

8CVSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 8:15 p.m.7 views

EUVD-2026-64135

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting XSS vulnerability in the testing OQL query functionality. This issue has been fixed in version 3.2.3...

8CVSS5.3AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/21 8:05 p.m.21 views

CVE-2026-30819 Combodo iTop: Reflected XSS in /pages/ajax.render.php dashboard_id parameter

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop has a reflected Cross-Site Scripting XSS vulnerability in its dashboard revert functionality with the parameter dashboardid in /pages/ajax.render.php. This issue has been fixed in version 3.2.3...

7.3CVSS
SaveExploits0References2
CVE
CVE
added 2026/08/21 8:05 p.m.11 views

CVE-2026-30819

Combodo iTop versions prior to 3.2.3 are affected by a reflected Cross-Site Scripting (XSS) vulnerability in the dashboard revert functionality. The vulnerable parameter is dashboard_id in the endpoint /pages/ajax.render.php . An attacker with low privileges and the ability to induce user interac...

7.3CVSS5.3AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 8:05 p.m.8 views

EUVD-2026-64127

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop has a reflected Cross-Site Scripting XSS vulnerability in its dashboard revert functionality with the parameter dashboardid in /pages/ajax.render.php. This issue has been fixed in version 3.2.3...

7.3CVSS5.3AI score
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/21 7:35 p.m.60 views

Auerswald COMfortel 1400/2600/3600 IP - Authentication Bypass

Auerswald COMfortel 1400/2600/3600 IP is susceptible to an authentication bypass vulnerability. Inserting the prefix "/about/../" allows bypassing the authentication check for the web-based configuration management interface. This enables attackers to gain access to the login credentials used for...

7.5CVSS7.5AI score0.50125EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/08/21 7:35 p.m.160 views

H3C ER8300G2-X - Password Disclosure

H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's management system can be accessed via the management system page login interface. id: CVE-2024-32238 info: name: H3C ER8300G2-X - Password Disclosure author: s4e-io,adeljck severity: critical description: | H3...

9.8CVSS8.7AI score0.52948EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/08/21 7:35 p.m.68 views

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...

9.8CVSS9AI score0.83622EPSS
SaveExploits5References4
NVD
NVD
added 2026/08/21 7:17 p.m.5 views

CVE-2026-63004

Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the addon and integration subsystem passes the operator-controlled parameters.url value from src/lib/addons/webhook.ts and the Slack, Microsoft Teams, Datadog, and New Relic integrations to Addon.fetchRetry i...

5.5CVSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/21 5:16 p.m.21 views

CVE-2026-17252 Unauthenticated Denial of Service via Composed HTTP Parsing and Stack-Based Out-of-Bounds Write Vulnerability in TL-MR6400 Web Management Interface

A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative web interface of TP-Link TL-MR6400 v7 routers. An unauthenticated adjacent attacker can trigger the vulnerability by sending a specially crafted malformed HTTP request...

7.1CVSS
SaveExploits0References3
CVE
CVE
added 2026/08/21 12:33 p.m.16 views

CVE-2026-59654

Apache CloudStack is affected by a resource leak in its scoped global configuration functionality, where database connections are not properly released after their effective lifetime. The issue impacts multiple management server modules, including Quota and Host-HA , and can lead to an eventual d...

6.8CVSS5.4AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 12:33 p.m.7 views

EUVD-2026-63941

Missing Release of Resource after Effective Lifetime vulnerability in Apache CloudStack's scoped global configuration functionality. It affects different modules and plugins of the CloudStack management server, including Quota, Host-HA, etc., and may lead to eventual denial of service DoS scenari...

6.8CVSS5.5AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/21 9:45 a.m.5 views

CVE-2026-74567

A flaw was found in the Linux kernel's key management subsystem. An unprivileged local attacker could exploit an out-of-bounds read vulnerability in the keyringgetkeychunk function. By providing specially crafted keys, the attacker can cause the system to read beyond its intended memory boundarie...

7.1CVSS5.2AI score0.00117EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/21 8:26 a.m.15 views

CVE-2026-59799

Apache CloudStack contains an Improper Privilege Management vulnerability in its Two-factor authentication plugin . The root cause is a missing privilege check in the two-factor authentication disable flow, which allows an attacker to bypass the 2FA disable flow . Affected versions: 4.18.0.0 thro...

5.3AI score0.00182EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 8:26 a.m.9 views

EUVD-2026-63841

Improper Privilege Management vulnerability in Apache CloudStack's Two-factor authentication plugin allowing bypass of the two-factor authentication disable flow. This issue affects Apache CloudStack: from 4.18.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to...

5.4AI score0.00182EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 8:23 a.m.13 views

CVE-2026-62440

An Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service (CKS) plugin allows cross-tenant manipulation of the Kubernetes cluster during node addition and removal operations. The flaw means that a tenant may be able to interfere with cluster node operations belonging to a...

5.2AI score0.00132EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 8:23 a.m.8 views

EUVD-2026-63835

Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service CKS plugin, allowing cross-tenant manipulation of the Kubernetes cluster while adding and removing nodes. This issue affects Apache CloudStack: from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to versi...

5.2AI score0.00132EPSS
SaveExploits0References1
Rows per page
Query Builder