Lucene search
+L

17 matches found

Snyk
Snyk
added 2026/07/08 4:38 p.m.7 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the public gRPC port :9080 for the external snapshot import process. An attacker can overwrite and replace the database contents by sendi...

9.1CVSS6.1AI score0.00388EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/08 4:38 p.m.9 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the public gRPC port :9080 for the external snapshot import process. An attacker can overwrite and replace the database contents by sendi...

9.1CVSS6.1AI score0.00388EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/08 4:38 p.m.7 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the public gRPC port :9080 for the external snapshot import process. An attacker can overwrite and replace the database contents by sendi...

9.1CVSS6.1AI score0.00388EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/08 4:38 p.m.8 views

Missing Authentication for Critical Function

Overview github.com/dgraph-io/dgraph/edgraph is a Dgraph is a horizontally scalable and distributed GraphQL database with a graph backend. Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the...

9.1CVSS6.1AI score0.00388EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/08 4:38 p.m.10 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the public gRPC port :9080 for the external snapshot import process. An attacker can overwrite and replace the database contents by sendi...

9.1CVSS6.1AI score0.00388EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/08 4:38 p.m.10 views

Missing Authentication for Critical Function

Overview github.com/dgraph-io/dgraph/v25/edgraph is a Dgraph is a horizontally scalable and distributed GraphQL database with a graph backend. Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the...

9.1CVSS6.1AI score0.00388EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/08 4:38 p.m.6 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the public gRPC port :9080 for the external snapshot import process. An attacker can overwrite and replace the database contents by sendi...

9.1CVSS6.1AI score0.00388EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/08 4:38 p.m.11 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the public gRPC port :9080 for the external snapshot import process. An attacker can overwrite and replace the database contents by sendi...

9.1CVSS6.1AI score0.00388EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/08 4:38 p.m.8 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the public gRPC port :9080 for the external snapshot import process. An attacker can overwrite and replace the database contents by sendi...

9.1CVSS6.1AI score0.00388EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/08 2:17 p.m.14 views

CVE-2026-54061

Dgraph is an open source distributed GraphQL database. Prior to version 25.3.5, Dgraph Alpha exposes the RPCs used for external snapshot import on the public gRPC port :9080 without authentication or authorization. As a result, an unauthenticated network client can open StreamExtSnapshot and send...

9.1CVSS0.00388EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/08 1:23 p.m.20 views

CVE-2026-54061

Dgraph Alpha before version 25.3.5 exposes the RPCs for external snapshot import on the public gRPC port :9080 without authentication or authorization, allowing an unauthenticated network client to open StreamExtSnapshot and stream Badger data to the target group’s store. The receiver invokes Pre...

9.1CVSS5.9AI score0.00388EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/08 1:23 p.m.10 views

CVE-2026-54061

Dgraph is an open source distributed GraphQL database. Prior to version 25.3.5, Dgraph Alpha exposes the RPCs used for external snapshot import on the public gRPC port :9080 without authentication or authorization. As a result, an unauthenticated network client can open StreamExtSnapshot and send...

9.1CVSS5.9AI score0.00388EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/07/08 1:23 p.m.11 views

EUVD-2026-42235

Dgraph is an open source distributed GraphQL database. Prior to version 25.3.5, Dgraph Alpha exposes the RPCs used for external snapshot import on the public gRPC port :9080 without authentication or authorization. As a result, an unauthenticated network client can open StreamExtSnapshot and send...

9.1CVSS5.9AI score0.00388EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/08 12:0 a.m.14 views

PT-2026-56423

Name of the Vulnerable Software and Affected Versions Dgraph versions prior to 25.3.5 Description Dgraph Alpha exposes privileged RPCs used for external snapshot import on the public gRPC port :9080 without authentication or authorization. An unauthenticated network client can access the...

9.1CVSS6.1AI score0.00388EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2018/09/14 9:0 p.m.21 views

CVE-2018-16706

LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsrserver/device/reboot on port 9080...

7.6AI score0.22333EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2010/05/07 5:43 p.m.20 views

CVE-2009-4844

ToutVirtual VirtualIQ Pro 3.2 build 7882 does not restrict access to the /status URI on port 9080, which allows remote attackers to obtain sensitive Tomcat information via a direct request...

6.2AI score0.01205EPSS
SaveExploits0References3
Packet Storm
Packet Storm
added 2009/10/27 12:0 a.m.55 views

Snort Back Orifice Stack Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Snort Back...

7.5CVSS0.2AI score0.83621EPSS
SaveExploits15
Rows per page
Query Builder