Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:38 p.m.7 views

CVE-2026-21742

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1,...

6.5CVSS5.4AI score0.00148EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/14 6:30 p.m.0 views

EUVD-2026-22315

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1,...

5.7CVSS5.8AI score0.00148EPSS
Exploits0References2
NVD
NVD
added 2026/04/14 4:16 p.m.1 views

CVE-2026-21742

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1,...

6.5CVSS0.00148EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/14 3:38 p.m.28 views

CVE-2026-21742

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1,...

5.7CVSS0.00148EPSS
Exploits0References1
CVE
CVE
added 2026/04/14 3:38 p.m.14 views

CVE-2026-21742

Fortinet FortiSOAR products are affected by CVE-2026-21742, a cleartext transmission vulnerability that could allow an authenticated attacker to view cleartext passwords in responses for Secure Message Exchange and Radius queries when configured. Affected: FortiSOAR PaaS versions 7.6.0–7.6.3, 7.5...

6.5CVSS5.8AI score0.00148EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/14 3:38 p.m.1 views

CVE-2026-21742

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1,...

5.7CVSS5.8AI score0.00148EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.3 views

PT-2026-32663

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1,...

5.7CVSS5.8AI score0.00148EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/05 12:0 a.m.4 views

KDE Connect 安全漏洞

KDE Connect is a software from the KDE community that connects cell phones and computers. A security vulnerability exists in versions of KDE Connect prior to 2025-04-18, which stems from the use of broadcast UDP for the message exchange protocol and could lead to temporary tampering of device...

4.3CVSS6.3AI score0.00102EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:0 a.m.3 views

The vulnerability of the Secure Client Authentication (SCA) server, a software solution for voice call authentication and message exchange in BlackBerry SecuSUITE, allows attackers to circumvent security restrictions and execute brute-force attacks.

The vulnerability of the Secure Client Authentication SCA server, a software solution for voice call authentication and message exchange, developed by BlackBerry SecuSUITE, stems from the lack of limits on the number of authentication attempts. Exploiting this vulnerability allows a malicious act...

4.8CVSS5.6AI score0.0031EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2025/01/09 4:5 a.m.117 views

CVE-2025-0306

CVE-2025-0306 concerns the Ruby interpreter and a Marvin Attack that can decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service. The connected docs corroborate Ruby advisories for EulerOS (ruby package security advisories Eul...

7.4CVSS7.3AI score0.00626EPSS
Exploits0References3
Veracode
Veracode
added 2023/09/29 10:59 a.m.16 views

Information Exposure

github.com/schollz/croc is vulnerable to Information Exposure. The vulnerability is due to there case where an explicit IP isn't provided, the receiver prompts the sender for its local IP addresses using the ips? message. That triggers an unencrypted message exchange and sender will send out...

5.3CVSS6.4AI score0.004EPSS
Exploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/02/17 12:0 a.m.2 views

The vulnerability of the message exchange component of the system for loading user files in the Apex-VUZ education automation system allows a perpetrator to upload any files onto the server.

The vulnerability of the message exchange component of the system for loading user files in the Apex-VUZ education automation system is related to the unlimited loading of malicious files. Exploiting this vulnerability allows a remote attacker to load malicious files onto the server...

10CVSS5.5AI score
Exploits0Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 5:6 a.m.2 views

SUSE CVE-2016-2370

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in an out-of-bounds read. A malicious server or man-in-the-middle attacker can send invalid data to trigger this vulnerability...

5.9CVSS6.8AI score0.02105EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.2 views

The vulnerability of the components of the audit log system for Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Emergency Responder, Cisco Message Exchange System Cisco Unity Connection, and the software for managing license issuance called Cisco Prime License Manager (PLM) allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the components of the audit system for Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition SME, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Emergency Responder, Cisco Message Exchange Syst...

4.3CVSS6.4AI score0.00908EPSS
Exploits0References3
Rows per page
Query Builder