Lucene search
+L

11 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/19 12:00 a.m.•1 views

CVE-2026-93983: Improper Neutralization of Special Elements used in an SQL Command

OpenPanel through 2.3.0 fails to escape property keys in ClickHouse SQL queries, allowing authenticated users to inject boolean SQL terms. Attackers can supply crafted filter names to bypass project isolation and access metrics from other projects...

5.3CVSS5.8AI score0.00332EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/06/02 12:31 a.m.•30 views

EUVD-2026-33765

Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log and metric for every application and platform component via minting a JWT that the cf-auth-proxy accepts as a valid logs.admin token...

7.5CVSS5.8AI score0.00647EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/01 10:16 p.m.•29 views

CVE-2026-40964

Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log and metric for every application and platform component via minting a JWT that the cf-auth-proxy accepts as a valid logs.admin token...

7.5CVSS0.00647EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/01 9:02 p.m.•54 views

CVE-2026-40964

Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log and metric for every application and platform component via minting a JWT that the cf-auth-proxy accepts as a valid logs.admin token...

7.5CVSS0.00647EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/01 9:02 p.m.•50 views

CVE-2026-40964

Cloud Foundry Foundation reports an Authentication Bypass in cf-auth-proxy that permits an unauthenticated remote attacker to read all logs and metrics for all apps and platform components by minting a JWT accepted as a valid logs.admin token. Affected: log-cache_release up to v3.2.6 (inclusive);...

7.5CVSS5.9AI score0.00647EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•31 views

Cloud Foundry Foundation 安全漏洞

Cloud Foundry Foundation is an open-source platform as a service PaaS offered by the Cloud Foundry Foundation. There is a security vulnerability in Cloud Foundry Foundation’s cf-auth-proxy component. This vulnerability stems from authentication bypassing, allowing unauthenticated remote attackers...

7.5CVSS5.4AI score0.00647EPSS
SaveExploits0References1
Cloud Foundry
Cloud Foundry
•added 2026/05/22 12:00 a.m.•19 views

CVE-2026-40964 - Read access to CF logs | Cloud Foundry

Severity 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:X/RC:X/CR:M/IR:X/AR:X/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:N/MA:N Vendor CloudFoundry Foundation Description Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to ga...

7.5CVSS6.1AI score0.00647EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2017-16534

Malware in sbrugna...

3.5CVSS4.8AI score0.00495EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-21147

Malicious code in bioql PyPI...

4.6CVSS5AI score0.00324EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/10/17 12:00 a.m.•16 views

Red Hat OpenShift 输入验证错误漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat that enables building, testing, deploying and running applications. An input validation error vulnerability exists in Redhat Openshift Enterprise, which arises when a user creates a project named "MyProject" a...

3.5CVSS5.1AI score0.00495EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/08/10 8:15 p.m.•11 views

CVE-2022-23238

Linux deployments of StorageGRID formerly StorageGRID Webscale versions 11.6.0 through 11.6.0.2 deployed with a Linux kernel version less than 4.7.0 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to view limited metrics information and modify alert email...

6.5CVSS6.7AI score0.00733EPSS
SaveExploits0References2
Rows per page
Query Builder