Lucene search
+L

113111 matches found

OSV
OSV
•added 2026/10/06 7:17 p.m.•9 views

DEBIAN-CVE-2026-106187

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

4.2CVSS5.8AI score0.00203EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 7:17 p.m.•11 views

CVE-2026-106183

Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

5.9CVSS0.00273EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/06 7:17 p.m.•10 views

CVE-2026-105488

Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user with only the global vault view permission to modify and delete global contact and folder entries...

7.1CVSS0.00259EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 7:17 p.m.•10 views

CVE-2026-103620

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new default. In repositories that required...

6CVSS0.00449EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/10/06 7:17 p.m.•8 views

CVE-2026-79807 Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute attacker-supplied code with elevated privileges on t...

7.8CVSS6.1AI score0.00079EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 7:17 p.m.•41 views

CVE-2026-79807 Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute attacker-supplied code with elevated privileges on t...

7.8CVSS0.00079EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 7:17 p.m.•14 views

CVE-2026-79807

The ClearPass Policy Manager Windows client software contains a missing integrity verification vulnerability. This flaw could allow an authenticated local user to perform Local Privilege Escalation , enabling them to execute arbitrary code with elevated privileges on the local system. No specific...

7.8CVSS6.1AI score0.00079EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 7:17 p.m.•17 views

CVE-2026-79801

A missing integrity verification vulnerability exists in the client agent software of HPE Networking ClearPass Policy Manager . This flaw could allow an unauthenticated remote attacker to introduce untrusted code into the system. Successful exploitation could result in the execution of arbitrary ...

9.8CVSS6.8AI score0.00323EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 7:17 p.m.•11 views

EUVD-2026-93888

A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to execute arbitrary code on the affected client syste...

9.8CVSS6.8AI score0.00323EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/06 7:17 p.m.•9 views

CVE-2026-79801 Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent

A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to execute arbitrary code on the affected client syste...

9.8CVSS6.8AI score0.00323EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 7:17 p.m.•43 views

CVE-2026-79801 Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent

A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to execute arbitrary code on the affected client syste...

9.8CVSS0.00323EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 7:16 p.m.•36 views

CVE-2026-76751

A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager . This flaw could allow an unauthenticated, remote attacker to achieve arbitrary code execution on the affected endpoint. The execution would occur with the elevated privileges assigned to the a...

9.8CVSS6.8AI score0.003EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 7:16 p.m.•42 views

CVE-2026-76751 Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution

A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint with the elevated privileges of the agent...

9.8CVSS0.003EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 6:56 p.m.•15 views

CVE-2026-103620

A missing authorization vulnerability in GitHub Enterprise Server allows repository collaborators with write access to delete the current default branch using the GraphQL API . This flaw enables an attacker to set an attacker-controlled branch as the new default. In repositories requiring pull-re...

6CVSS5.8AI score0.00449EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/06 6:56 p.m.•11 views

EUVD-2026-93666

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new default. In repositories that required...

6CVSS5.8AI score0.00449EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/06 6:56 p.m.•49 views

CVE-2026-103620 Missing authorization in GitHub Enterprise Server allowed repository writers to replace default branches via GraphQL

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new default. In repositories that required...

6CVSS0.00449EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/10/06 6:56 p.m.•8 views

CVE-2026-103620 Missing authorization in GitHub Enterprise Server allowed repository writers to replace default branches via GraphQL

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new default. In repositories that required...

6CVSS5.8AI score0.00449EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/06 6:52 p.m.•50 views

CVE-2026-106511 CVE-2026-106511

MultiversX's multisig-improved repository: mx-multisig-and-modules reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account with the Proposer role to perform explicitly barred actions. Thi...

0.00376EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/06 6:52 p.m.•12 views

CVE-2026-106511 CVE-2026-106511

MultiversX's multisig-improved repository: mx-multisig-and-modules reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account with the Proposer role to perform explicitly barred actions. Thi...

5.8AI score0.00376EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/06 6:52 p.m.•29 views

CVE-2026-106511

The MultiversX multisig-improved reference implementation (repository: mx-multisig-and-modules) contains a vulnerability in its on-chain multisig smart contract system . Due to a missing independent authorization check , any account assigned the Proposer role can perform actions that are explicit...

9.8CVSS5.8AI score0.00376EPSS
SaveExploits0References2
Rows per page
Query Builder