Lucene search
K

9 matches found

Positive Technologies
Positive Technologies
added 2026/05/14 12:0 a.m.8 views

PT-2026-40967

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.81.0 Description A flaw in the Windows MDM management endpoint allows requests to be processed without proper client certificate validation. The endpoint relies on mutual TLS mTLS—a process where both the client and...

8.2CVSS5.8AI score0.00011EPSS
Exploits0References7
Patchstack
Patchstack
added 2026/05/08 5:0 p.m.5 views

NPM: n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposure

NPM: n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposure vulnerability discovered by ? in WordPress Npm n8n-mcp versions 2.50.1...

5.8AI score
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2026/04/01 8:34 p.m.15 views

CVE-2026-4364 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 allows certificate listings retrieved via a browser session to return a...

5.4CVSS0.00021EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/31 11:17 a.m.3 views

CVE-2026-32971

OpenClaw before 2026.3.11 contains an approval-integrity vulnerability in node-host system.run approvals that displays extracted shell payloads instead of the executed argv. Attackers can place wrapper binaries and induce wrapper-shaped commands to execute local code after operators approve...

7.3CVSS6AI score0.00021EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-45437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site...

6.5CVSS5.3AI score0.00727EPSS
Exploits0References2
Circl
Circl
added 2025/08/05 7:53 a.m.2 views

CVE-2025-8313

creationtimestamp| type| source ---|---|--- 2025-08-05 07:53:54+00:00| seen| Telegram/2uUegEaP4ggTTnCJRbWxFElysSr7PzDhG3RSzm7OC9EFJ8...

6.4CVSS4.2AI score0.00203EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 8:44 p.m.2 views

CVE-2021-39402

MaianAffiliate v.1.0 is suffers from code injection by adding a new product via the admin panel. The injected payload is reflected on the affiliate main page for all authenticated and unauthenticated visitors...

7.2CVSS7.1AI score0.00886EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/04/27 12:0 a.m.3 views

PT-2023-23272 · Unknown · Startsharp +1

Name of the Vulnerable Software and Affected Versions: Serenity Serene versions prior to 6.7.0 StartSharp versions prior to 6.7.0 Description: A security issue was discovered where users can upload temporary files with certain file endings, such as .html or .htm, that contain a malicious payload...

6.1CVSS7.3AI score0.0068EPSS
Exploits1References10
Circl
Circl
added 2021/02/27 12:39 a.m.1 views

CVE-2021-26562

creationtimestamp| type| source ---|---|--- 2021-02-27 00:39:33+00:00| seen| https://t.me/cibsecurity/24254...

9CVSS8.1AI score0.01388EPSS
Exploits1References1
Rows per page
Query Builder