Lucene search
+L

3126 matches found

CNNVD
CNNVD
added 2026/01/19 12:0 a.m.9 views

Prime security vulnerabilities

Prime is a content management system developed by Birkir Gudjonsson. Versions of Prime prior to 0.4.0.beta.0 contained security vulnerabilities, which were caused by incorrect operations with files and GraphQL queries, potentially leading to resource consumption...

7.5CVSS6.1AI score0.00684EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/19 12:0 a.m.16 views

PT-2026-3473

Name of the Vulnerable Software and Affected Versions birkir prime versions prior to 0.4.0.beta.0 Description A security issue exists in birkir prime related to the GraphQL API component. A manipulation of the /graphql file processing can lead to information disclosure. The issue may be exploited...

6.9CVSS5.9AI score0.00367EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2026/01/19 12:0 a.m.14 views

PT-2026-3499

A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be performed from remote. The exploit is...

6.9CVSS5.1AI score0.00417EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/01/19 12:0 a.m.8 views

Prime Access Control Vulnerability

Prime is a content management system developed by Birkir Gudjonsson. Versions of Prime prior to 0.4.0.beta.0 contained an access control vulnerability caused by incorrect operations on the /graphql file, which could lead to information leakage...

6.9CVSS6.1AI score0.00367EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/01/16 5:26 p.m.15 views

CVE-2026-20075

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against users of the interface of an affected system. This...

4.8CVSS6.1AI score0.00221EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.5 views

MiracleLinux 7 : gnutls-3.3.29-8.el7 (AXSA:2019-3543:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3543:01 advisory. gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls CVE-2018-10844 gnutls: HMAC-SHA-384 vulnerable to...

5.9CVSS6.5AI score0.03623EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/15 5:16 p.m.4 views

CVE-2026-20075

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against users of the interface of an affected system. This...

4.8CVSS6AI score0.00221EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/15 4:32 p.m.26 views

CVE-2026-20075

CVE-2026-20075 affects Cisco EPNM and Cisco Prime Infrastructure web-based management interfaces. The root cause is improper validation of user input, enabling a stored cross-site scripting (XSS) vulnerability in data fields. An authenticated, remote attacker with valid admin credentials could in...

4.8CVSS5.8AI score0.00221EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/15 4:32 p.m.3 views

CVE-2026-20075

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against users of the interface of an affected system. This...

4.8CVSS5.8AI score0.00221EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2026/01/15 4:32 p.m.26 views

CVE-2026-20075 Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against users of the interface of an affected system. This...

4.8CVSS0.00221EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/15 12:0 a.m.7 views

Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure have cross-site scripting vulnerabilities

Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure are products of Cisco, a company based in the United States. Cisco Evolved Programmable Network Manager is a network management solution. Cisco Prime Infrastructure is an application software designed to simplify the...

4.8CVSS5.7AI score0.00221EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 11:57 a.m.6 views

CVE-2018-4398

An issue existed in the method for determining prime numbers. This issue was addressed by using pseudorandom bases for testing of primes. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1, iTunes 12.9.1, iCloud for Windows 7.8...

7.5CVSS6.2AI score0.0163EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/01/09 12:23 a.m.8 views

SUSE CVE-2026-21895

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

3.3CVSS6.9AI score0.00405EPSS
SaveExploits0References3
OSV
OSV
added 2026/01/08 2:15 p.m.8 views

UBUNTU-CVE-2026-21895

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

6.9CVSS5.8AI score0.00405EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/01/08 2:15 p.m.11 views

CVE-2026-21895

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

6.9CVSS5.9AI score0.00405EPSS
SaveExploits0References3
OSV
OSV
added 2026/01/08 2:6 p.m.7 views

CVE-2026-21895 rsa crate has potential panic on a prime being equal to 1

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

6.9CVSS6.4AI score0.00405EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/01/08 2:6 p.m.28 views

CVE-2026-21895 rsa crate has potential panic on a prime being equal to 1

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

6.9CVSS0.00405EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/08 2:6 p.m.4 views

CVE-2026-21895 rsa crate has potential panic on a prime being equal to 1

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

6.9CVSS6.5AI score0.00405EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/08 2:6 p.m.7 views

EUVD-2026-1033

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

6.9CVSS6.3AI score0.00405EPSS
SaveExploits0References4
CVE
CVE
added 2026/01/08 2:6 p.m.33 views

CVE-2026-21895

The CVE-2026-21895 entry concerns the rsa crate (Rust) where constructing an RSA private key from components panics if one of the primes equals 1 in versions prior to 0.9.10. The issue is resolved in 0.9.10. Connected sources confirm the affected component (rsa crate) and the fix version, with no...

6.9CVSS6.5AI score0.00405EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder