Lucene search
+L

864 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/19 11:12 p.m.7 views

CVE-2026-29109

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions up to and including 8.9.2 contain an unsafe deserialization vulnerability in the SavedSearch filter processing component that allows an authenticated administrator to execute arbitrary...

8.6CVSS6.1AI score0.00469EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/03/19 11:12 p.m.10 views

CVE-2026-29109 SuiteCRM Authenticated Remote Code Execution via Unsafe Deserialization in SavedSearch Filter Processing

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions up to and including 8.9.2 contain an unsafe deserialization vulnerability in the SavedSearch filter processing component that allows an authenticated administrator to execute arbitrary...

8.6CVSS6.1AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/19 12:00 a.m.17 views

PT-2026-26447

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions up to and including 8.9.2 contain an unsafe deserialization vulnerability in the SavedSearch filter processing component that allows an authenticated administrator to execute arbitrary...

8.6CVSS6.1AI score0.00469EPSS
SaveExploits0References3
OSV
OSV
added 2026/03/18 6:16 p.m.28 views

UBUNTU-CVE-2026-32634

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS5.8AI score0.00282EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2026/03/18 6:16 p.m.11 views

CVE-2026-32634

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS5.9AI score0.00282EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/03/18 5:55 p.m.42 views

CVE-2026-32634 Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS0.00282EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/03/17 5:19 p.m.9 views

CVE-2026-32296 Sipeed NanoKVM unauthenticated Wi-Fi configuration endpoint

Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a request to exhaust the system memory and terminate...

8.8CVSS5.8AI score0.00504EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/03/17 5:19 p.m.41 views

CVE-2026-32296 Sipeed NanoKVM unauthenticated Wi-Fi configuration endpoint

Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a request to exhaust the system memory and terminate...

8.8CVSS0.00504EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/03/16 3:30 p.m.16 views

EUVD-2026-12303

Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker to access saved information...

4.8CVSS5.8AI score0.00092EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/16 2:18 p.m.10 views

CVE-2026-20993

Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker to access saved information...

5.5CVSS0.00092EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/16 4:32 a.m.17 views

CVE-2026-20993

The connected PT and EUVD entries describe a vulnerability in Samsung Assistant prior to version 9.3.10.7, caused by improper export of Android application components. This allows a local attacker to access saved information. No exploitation details are provided in the documents, and no remediati...

5.5CVSS5.8AI score0.00092EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/16 4:32 a.m.8 views

CVE-2026-20993

Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker to access saved information...

4.8CVSS5.8AI score0.00092EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/16 4:32 a.m.4 views

CVE-2026-20993

Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker to access saved information...

4.8CVSS5.8AI score0.00092EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/03/16 4:32 a.m.36 views

CVE-2026-20993

Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker to access saved information...

4.8CVSS0.00092EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/12 3:30 p.m.14 views

EUVD-2026-11581

A vulnerability allowing a low-privileged user to extract saved SSH credentials...

7.7CVSS5.8AI score0.00401EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/12 3:16 p.m.8 views

CVE-2026-21670

A vulnerability allowing a low-privileged user to extract saved SSH credentials...

7.7CVSS0.00401EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/12 3:09 p.m.40 views

CVE-2026-21670

A vulnerability allowing a low-privileged user to extract saved SSH credentials...

7.7CVSS0.00401EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/12 3:09 p.m.55 views

CVE-2026-21670

Veeam Backup & Replication versions prior to 13.0.1.2067 are affected by CVE-2026-21670, enabling a low-privileged user to extract saved SSH credentials. The issue is documented in the Veeam KB (KB4831) and is listed with a CVSS v3.1 score of 7.7 (High). Affected deployment types include Windows-...

7.7CVSS5.8AI score0.00401EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/12 3:09 p.m.5 views

CVE-2026-21670

A vulnerability allowing a low-privileged user to extract saved SSH credentials...

7.7CVSS5.8AI score0.00401EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/12 12:00 a.m.13 views

PT-2026-24956

Name of the Vulnerable Software and Affected Versions Veeam Backup and Replication affected versions not specified Description A flaw exists that could allow a low-privileged user to obtain saved SSH credentials. The issue involves the potential extraction of these credentials. Recommendations At...

7.7CVSS7.3AI score0.00401EPSS
SaveExploits0References5
Rows per page
Query Builder