Lucene search
+L

6 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•9 views

CVE-2026-97866: Channel Accessible by Non-Endpoint

A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Executing a manipulation of the argument version/url/packagekey/package name can lead to channel accessible by non-endpoint...

6.3CVSS5.1AI score0.00261EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/10/29 12:00 a.m.•7 views

Siemens SIMATIC Devices Channel Accessible by Non-Endpoint (CVE-2023-7008)

A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles or the upstream DNS resolver to manipulate records. This plugin only works with Tenable.ot. Please visit...

5.9CVSS6.6AI score0.00849EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/10/15 12:00 a.m.•52 views

The vulnerability of the software for monitoring and analyzing network traffic in industrial networks, SINEC Traffic Analyzer, arises from the ability to access the channel from a non-endpoint location, allowing attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic in industrial networks lies in the ability to access the channel from a point that is not a final destination. Exploiting this vulnerability could allow an attacker to execute a “man-in-the-middl...

7.4CVSS5.8AI score0.00118EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/08/27 12:00 a.m.•13 views

The vulnerability of the CLI component of the Cisco Catalyst SD-WAN Manager’s centralized network management system allows a attacker to elevate their privileges to the root level.

The vulnerability of the CLI component in the Cisco Catalyst SD-WAN Manager centralized network management system is related to access to the channel from a non-endpoint location. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

7.8CVSS5.8AI score0.00154EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/02/14 12:00 a.m.•25 views

The vulnerability of the Veeam Updater, a component of backup and recovery tools such as Veeam Backup for Salesforce, Veeam Backup for Nutanix AHV, and Veeam Backup for AWS, allows a perpetrator to carry out a “man-in-the-middle” attack.

The vulnerability of the Veeam Updater, a component of backup and recovery tools such as Veeam Backup for Salesforce, Veeam Backup for Nutanix AHPV, and Veeam Backup for AWS, relates to access to a channel from a non-endpoint location. Exploiting this vulnerability allows a remote attacker to...

9CVSS8.2AI score0.00637EPSS
SaveExploits0References3Affected Software6
BDU FSTEC
BDU FSTEC
•added 2022/07/18 12:00 a.m.•18 views

The vulnerability of the TUG Home Base Server lies in its ability to access a channel from a non-endpoint, allowing attackers to execute a “man-in-the-middle” attack.

The vulnerability of the TUG Home Base Server relates to access to a channel from a point that is not a final destination. Exploiting this vulnerability allows a remote attacker to carry out a “man-in-the-middle” attack...

10CVSS7.8AI score0.0067EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder