Lucene search
+L

13383 matches found

Xen Project
Xen Project
added 2026/07/28 12:0 p.m.9 views

grant-table: version change racing with other operations

ISSUE DESCRIPTION With the introduction of Grant Table v2 came the requirement to be able to switch between versions. Switching from v1 to v2 reduces the number of valid grant references, as a bigger shared entry structure is then needed while the shared table doesn't change size. Switching from ...

6.5CVSS5.8AI score0.00195EPSS
SaveExploits0Affected Software1
Talos Blog
Talos Blog
added 2026/07/28 10:0 a.m.35 views

IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains

Phishing was the primary means of gaining initial access this quarter, appearing in over half of all Cisco Talos Incident Response Talos IR engagements - an increase from approximately a third of engagements last quarter. Attackers continued to innovate their delivery methods to evade defenses,...

6.3AI score
SaveExploits0
Cvelist
Cvelist
added 2026/07/27 6:0 p.m.34 views

CVE-2026-48052 Papra: Cross-organization tag deletion and modification via authenticated cross-tenant request

Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, an authenticated user who is a member of any organization can delete or rename tags belonging to a different organization, given the target tag's ID. The route handler verifies the caller's membership of...

5.4CVSS0.00211EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/27 1:18 p.m.9 views

CVE-2026-59690

A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged administrative operations via the REST API that should not be...

8CVSS0.00175EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/27 12:26 p.m.7 views

CVE-2026-59690 Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API

A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged administrative operations via the REST API that should not be...

8CVSS5.8AI score0.00175EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/27 12:26 p.m.42 views

CVE-2026-59690

The CVE-2026-59690 entry concerns a Missing Authorization vulnerability across Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant. An authenticated attacker with low privileges can perform privileged administrative operations via th...

8CVSS5.9AI score0.00175EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/27 12:26 p.m.10 views

CVE-2026-59690

A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged administrative operations via the REST API that should not be...

8.4CVSS5.9AI score0.00734EPSS
SaveExploits0References2Affected Software5
Cvelist
Cvelist
added 2026/07/27 12:26 p.m.35 views

CVE-2026-59690 Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API

A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged administrative operations via the REST API that should not be...

8CVSS0.00175EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/27 12:26 p.m.9 views

EUVD-2026-49188

A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged administrative operations via the REST API that should not be...

8CVSS5.9AI score0.00175EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/07/27 7:13 a.m.7 views

CVE-2026-64515

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. This vulnerability arises from incorrect handling of Multi-Link Element MLE defragmentation. When a reconf or EPCS Enhanced Power Save MLE is present in a non-transmitted profile, the defragmentation routine uses an incorrect pointe...

8.3CVSS5.8AI score0.00238EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/27 5:49 a.m.5 views

BIT-OPENBAO-2026-40264 OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation

OpenBao is an open source identity-based secrets management system. OpenBao's namespaces provide multi-tenant separation. Prior to version 2.5.3, a tenant who leaks token accessors can have their token revoked or renewed by a privileged administrator in another tenant. This is addressed in v2.5.3...

2.7CVSS5.9AI score0.00301EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/27 5:48 a.m.5 views

BIT-OPENBAO-2025-55003 OpenBao Login MFA Bypasses Rate Limiting and TOTP Token Reuse

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, OpenBao's Login Multi-Factor Authentication MFA system allows enforcing MFA using Time-based One Time Password TOTP. Due to...

5.7CVSS5.9AI score0.00199EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/27 12:0 a.m.15 views

PT-2026-64905

Name of the Vulnerable Software and Affected Versions Progress Software LoadMaster affected versions not specified Progress ECS Connection Manager affected versions not specified Progress Object Scale Connection Manager affected versions not specified Progress MOVEit WAF affected versions not...

8.4CVSS6AI score0.00717EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/07/26 11:21 p.m.57 views

DarkPrompt

DarkPrompt !CIhttps://github.com/jason-allen-oneal/DarkPr...

5.9AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/07/25 3:57 p.m.7 views

SUSE CVE-2026-64515

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If either reconf or EPCS multi-link element MLE is contained in a non-transmitted profile, the defragmentation routine is called with a pointer to the defragmented copy, but the original...

8.3CVSS5.7AI score0.00238EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/25 9:14 a.m.18 views

CVE-2026-64515

In the Linux kernel’s wifi/mac80211 stack, CVE-2026-64515 describes a defect in MLE (Multi-Link Element) defragmentation. When reconf or EPCS MLE is present in a non-transmitted profile, the defragmentation routine is invoked with a pointer to the defragmented copy but the original elements, caus...

8.3CVSS5.7AI score0.00238EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/25 9:14 a.m.7 views

CVE-2026-64515 wifi: mac80211: fix MLE defragmentation

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If either reconf or EPCS multi-link element MLE is contained in a non-transmitted profile, the defragmentation routine is called with a pointer to the defragmented copy, but the original...

8.3CVSS5.7AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/25 12:0 a.m.11 views

PT-2026-64736

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mac80211 wifi component regarding Multi-Link Element MLE defragmentation. When a reconf or EPCS MLE is located in a non-transmitted profile, the defragmentation...

8.3CVSS5.8AI score0.00238EPSS
SaveExploits0
NVD
NVD
added 2026/07/24 7:16 p.m.13 views

CVE-2026-17107

A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes RHACM and multicluster-engine MCE. The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke...

8.5CVSS0.00346EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/07/24 3:13 p.m.8 views

CVE-2026-17039

A flaw was found in pki-core. The certificate authority CA renewal request path does not perform the realm-based authorization check that the enrollment path performs, allowing an authenticated user entitled to one realm to cause a certificate belonging to a different realm to be renewed without...

3.1CVSS5.8AI score0.00211EPSS
SaveExploits0References9
Rows per page
Query Builder