Lucene search
+L

6321 matches found

Atlassian
Atlassian
•added 2026/09/20 3:31 p.m.•7 views

Security Misconfiguration org.bouncycastle:bcprov-lts8on Dependency in Crowd Data Center

This High severity Security Misconfiguration vulnerability was introduced in versions 6.1.0, 6.2.0, 6.3.0, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This Security Misconfiguration vulnerability, with a CVSS Score of 7.1 and a CVSS Vector of...

7.5CVSS6.2AI score0.00196EPSS
SaveExploits0
Atlassian
Atlassian
•added 2026/09/20 3:31 p.m.•6 views

Security Misconfiguration org.bouncycastle:bcprov-jdk18on Dependency in Crucible Server

This High severity Security Misconfiguration vulnerability was introduced in version 4.9.0 of Crucible Server. This Security Misconfiguration vulnerability, with a CVSS Score of 7.1 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/U:Amber allows an...

7.5CVSS6.3AI score0.00196EPSS
SaveExploits0
Atlassian
Atlassian
•added 2026/09/20 3:31 p.m.•6 views

Security Misconfiguration org.bouncycastle:bcprov-lts8on Dependency in Confluence Data Center

This High severity Security Misconfiguration vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Security Misconfiguration vulnerability, with a CVSS Score of 7.1 and a CVSS Vector of...

7.5CVSS6.3AI score0.00196EPSS
SaveExploits0
Atlassian
Atlassian
•added 2026/09/20 3:31 p.m.•8 views

Security Misconfiguration org.bouncycastle:bcprov-jdk18on, org.bouncycastle:bcprov-lts8on Dependency in Jira Service Management Data Center

This High severity Security Misconfiguration vulnerability was introduced in versions 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This Security Misconfiguration vulnerability, with a CVSS Score of 7.1 and a CVS...

7.5CVSS6.2AI score0.00196EPSS
SaveExploits0
NVD
NVD
•added 2026/09/18 9:16 a.m.•22 views

CVE-2026-56595

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and...

4.3CVSS0.00149EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/18 9:16 a.m.•21 views

CVE-2026-21848

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...

5CVSS0.00162EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 8:25 a.m.•32 views

CVE-2026-56595

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability caused by improperly validated origin headers. This flaw allows an attacker to craft a malicious web page that interacts with the application to gain unauthorized access to protected resources and restricted APIs o...

4.3CVSS5.9AI score0.00149EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/09/18 8:25 a.m.•50 views

CVE-2026-56595 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and...

3.1CVSS0.00149EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/18 8:25 a.m.•15 views

EUVD-2026-82784

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and...

3.1CVSS5.9AI score0.00149EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/18 8:25 a.m.•22 views

CVE-2026-56595 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and...

3.1CVSS5.9AI score0.00149EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/18 8:21 a.m.•17 views

EUVD-2026-82773

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...

5CVSS5.8AI score0.00162EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/18 8:21 a.m.•49 views

CVE-2026-21848 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...

5CVSS0.00162EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 8:21 a.m.•30 views

CVE-2026-21848

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability stemming from improper access controls. An authenticated attacker with low privileges can exploit this to view restricted data elements across tenant boundaries , indicating a cross-tenant information disclosur...

5CVSS5.8AI score0.00162EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/18 8:21 a.m.•16 views

CVE-2026-21848 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...

5CVSS5.8AI score0.00162EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•9 views

CVE-2026-56595: Permissive Cross-domain Policy with Untrusted Domains

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and...

4.3CVSS5.9AI score0.00149EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-89058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins , reflects the request's Origin header back in the...

7.4CVSS5.8AI score0.00258EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•9 views

PT-2026-95330

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description A CORS Misconfiguration exists due to improperly validated origin headers. Cross-Origin Resource Sharing CORS is a mechanism that allows restricted resources on a web pa...

3.1CVSS5.7AI score0.00149EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•10 views

CVE-2026-21848: Improper Access Control

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...

5CVSS5.8AI score0.00162EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/17 8:31 p.m.•32 views

EUVD-2026-81262

OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning...

6.3CVSS5.9AI score0.00196EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/17 8:18 p.m.•17 views

CVE-2026-92757

Applications built on MongoDB Entity Framework Core Provider which place a database name in the connection string may inadvertently disable field level encryption...

6.8CVSS0.00067EPSS
SaveExploits0References1
Rows per page
Query Builder