Lucene search
+L

7 matches found

Snyk
Snyk
•added 2026/03/13 8:58 p.m.•9 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to a misconfigured NetworkPolicy. An attacker can gain unauthorized access to resources in other namespaces by exploiting the overly permissive network policy configuration. Workaround This vulnerability can ...

9CVSS7AI score0.00421EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2025-21563

Malicious code in bioql PyPI...

9.8CVSS7.4AI score0.01183EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/13 12:00 a.m.•21 views

F5 BIG-IP APM 安全漏洞

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. A security vulnerability exists in F5 BIG-IP APM that stems from configuring network access without properly handling specific traffic, which...

8.7CVSS6.5AI score0.00335EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/07/17 9:01 p.m.•22 views

CVE-2025-49831

An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute authentication requests to a malicious server under the attacker’s control. CyberArk believes there to be very few installations where this...

9.8CVSS7.3AI score0.01183EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/15 12:00 a.m.•6 views

CVE-2025-49831: Improper Authentication

An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute authentication requests to a malicious server under the attacker’s control. CyberArk believes there to be very few installations where this...

9.8CVSS5.7AI score0.01183EPSS
SaveExploits0References1
Veracode
Veracode
•added 2024/01/02 1:05 p.m.•43 views

Server Side Request Forgery

miniflare is vulnerable to Server Side Request Forgery. The vulnerability is caused due to a configuration which listens to requests from external network interfaces . As a result of this configuration, an attacker can access local servers by sending specially crafted Websocket requests to the...

8.1CVSS6.6AI score0.00552EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2019/08/26 12:00 a.m.•14 views

Google Android System Information Disclosure Vulnerability (CNVD-2019-31033)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. There is an information disclosure vulnerability in System in Android Q. The vulnerability arises from errors in the configuration of a networked...

5.5CVSS6.2AI score0.00139EPSS
SaveExploits0References1
Rows per page
Query Builder