Lucene search
+L

4336 matches found

Positive Technologies
Positive Technologies
•added 2026/03/04 12:00 a.m.•38 views

PT-2026-43926

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the KVM nSVM component, an issue exists where the current RIP Instruction Pointer is incorrectly used as the NextRIP in vmcb02 after the first L2 VMRUN. For guests with NRIPS disabled...

5.5CVSS5.7AI score0.0016EPSS
SaveExploits0
NVD
NVD
•added 2026/03/03 8:16 p.m.•20 views

CVE-2025-13734

IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions...

5.4CVSS0.0015EPSS
SaveExploits0References1
OSV
OSV
•added 2026/03/03 8:16 p.m.•20 views

CVE-2025-13734

IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions...

5.4CVSS5.8AI score0.0015EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/03 7:51 p.m.•40 views

CVE-2025-13734

IBM Engineering Requirements Management DOORS Next (versions 7.1 and 7.2) contains an access-control flaw (CWE-862) that could allow an authenticated user to view and edit data beyond their authorized permissions. The issue arises from insufficient authorization enforcement and has a CVSS v3.1 ba...

5.4CVSS5.8AI score0.0015EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/03/03 7:51 p.m.•15 views

CVE-2025-13734

IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions...

5.4CVSS5.9AI score0.0015EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/03 7:51 p.m.•7 views

CVE-2025-13734 IBM Engineering Requirements Management DOORS Next could allow an authenticated user to access and modify data beyond authorized permissions

IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions...

5.4CVSS5.8AI score0.0015EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/03 7:51 p.m.•19 views

EUVD-2025-208251

IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions...

5.4CVSS5.9AI score0.0015EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/03 12:00 a.m.•8 views

CVE-2025-13734: Missing Authorization

IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions...

5.4CVSS5.8AI score0.0015EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/03 12:00 a.m.•23 views

IBM Engineering Requirements Management DOORS Next 安全漏洞

IBM Engineering Requirements Management DOORS Next is a scalable solution provided by the American company International Business Machines IBM. This solution can help you capture, track, analyze, and manage systems as well as advanced IT application development. Versions 7.1 and 7.2 of IBM...

5.4CVSS5.8AI score0.0015EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/03 12:00 a.m.•25 views

PT-2026-22796

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Management DOORS Next versions 7.1 and 7.2 Description An authenticated user may be able to view and edit data outside of their authorized permissions. Recommendations Update to a newer version that contains a fix...

5.4CVSS5.9AI score0.0015EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2026/03/02 10:35 p.m.•17 views

Security Bulletin: IBM Engineering Requirements Management DOORS Next could allow an authenticated user to access and modify data beyond authorized permissions (CVE-2025-13734)

Summary IBM Engineering Requirements Management DOORS Next could allow an authenticated user to view and edit data beyond their assigned access permissions. This issue occurs due to insufficient authorization enforcement. An attacker with valid credentials could exploit this vulnerability to gain...

5.4CVSS6AI score0.0015EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/02/26 10:34 p.m.•16 views

CVE-2026-2624

Missing Authentication for Critical Function vulnerability in ePati Cyber ​​Security Technologies Inc. Antikor Next Generation Firewall NGFW allows Authentication Bypass.This issue affects Antikor Next Generation Firewall NGFW: from v.2.0.1298 before v.2.0.1301...

9.8CVSS5.3AI score0.02369EPSS
SaveExploits2References1
The Hacker News
The Hacker News
•added 2026/02/26 10:35 a.m.•22 views

Microsoft Warns Developers of Fake Next.js Job Repos Delivering In-Memory Malware

A "coordinated developer-targeting campaign" is using malicious repositories disguised as legitimate Next.js projects and technical assessments to trick victims into executing them and establish persistent access to compromised machines. "The activity aligns with a broader cluster of threats that...

6.3AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/25 10:42 p.m.•12 views

@eui/deps-base-light-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32), @eui/deps-base-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32) +1 more potentially affected by CVE-2026-27739 via @angular-devkit/build-angular (>=20.0.0, <=20.1.0)

@angular-devkit/build-angular NPM version =20.0.0, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =21.0.0-alpha.32 - ng-deploy-oss 20.0.0 Source cves: CVE-2026-27739 Source advisory: SNYK:JS-ANGULARDEVKITBUILDANGULAR-15357315...

9.2CVSS8.2AI score0.00516EPSS
SaveExploits1
NVD
NVD
•added 2026/02/25 1:16 p.m.•26 views

CVE-2026-2624

Missing Authentication for Critical Function vulnerability in ePati Cyber ​​Security Technologies Inc. Antikor Next Generation Firewall NGFW allows Authentication Bypass. This issue affects Antikor Next Generation Firewall NGFW: from v.2.0.1298 before v.2.0.1301...

9.8CVSS0.02369EPSS
SaveExploits2References2
CVE
CVE
•added 2026/02/25 12:39 p.m.•47 views

CVE-2026-2624

CVE-2026-2624 affects Antikor Next Generation Firewall (NGFW) from ePati Cyber Security Technologies Inc. The issue is a Missing Authentication for Critical Function vulnerability that enables an authentication bypass. Affected versions are NGFW 2.0.1298 up to, but not including, 2.0.1301. The CV...

9.8CVSS5.9AI score0.02369EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/25 12:00 a.m.•14 views

PT-2026-21902

Name of the Vulnerable Software and Affected Versions ePati Cyber Security Technologies Inc. Antikor Next Generation Firewall NGFW versions prior to 2.0.1301 Description A missing authentication check for a critical function in the Antikor Next Generation Firewall NGFW allows an attacker to bypas...

9.8CVSS6AI score0.02369EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/25 12:00 a.m.•3 views

CVE-2026-2624: Missing Authentication for Critical Function

Missing Authentication for Critical Function vulnerability in ePati Cyber ​​Security Technologies Inc. Antikor Next Generation Firewall NGFW allows Authentication Bypass. This issue affects Antikor Next Generation Firewall NGFW: from v.2.0.1298 before v.2.0.1301...

9.8CVSS5.8AI score0.02369EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2026/02/25 12:00 a.m.•25 views

ePati Cyber Security ePati Cyber u200bu200bSecurity Antikor Next Generation Firewall 访问控制错误漏洞

ePati Cyber Security’s Antikor Next Generation Firewall is a next-generation firewall system developed by the Turkish company ePati Cyber Security. There were access control vulnerability issues in versions from v.2.0.1298 to v.2.0.1301 of the Antikor Next Generation Firewall. This vulnerability...

9.8CVSS5.8AI score0.02369EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2026/02/21 7:30 p.m.•18 views

CVE-2025-67987

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows SQL Injection.This issue affects Quiz And Survey Master: from n/a through = 10.3.1...

8.5CVSS5.8AI score0.0028EPSS
SaveExploits0References1
Rows per page
Query Builder