Lucene search
+L

150 matches found

Positive Technologies
Positive Technologies
added 2026/03/11 12:0 a.m.14 views

PT-2026-24853

🚨 CVE-2026-32130 ZITADEL is an open source identity management platform. From 2.68.0 to before 3.4.8 and 4.12.2, Zitadel provides a System for Cross-domain Identity Management SCIM API to provision users from external providers into Zitadel. Request to the API with URL-encoded path values were...

7.5CVSS5.8AI score0.00584EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2026/01/09 9:51 a.m.10 views

CVE-2020-10256

An issue was discovered in beta versions of the 1Password command-line tool prior to 0.5.5 and in beta versions of the 1Password SCIM bridge prior to 0.7.3. An insecure random number generator was used to generate various keys. An attacker with access to the user's encrypted data may be able to...

9.8CVSS6.8AI score0.00869EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:54 a.m.14 views

CVE-2021-41100

Wire-server is the backing server for the open source wire secure messaging application. In affected versions it is possible to trigger email address change of a user with only the short-lived session token in the Authorization header. As the short-lived token is only meant as means of...

9.8CVSS7.2AI score0.01075EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/12/12 12:26 a.m.9 views

SUSE CVE-2025-41115

SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management. In Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user...

10CVSS6.7AI score0.16905EPSS
SaveExploits1References2
GithubExploit
GithubExploit
added 2025/12/03 1:44 p.m.318 views

Exploit for CVE-2025-41115

Grafana SCIMalform CVE-2025-41115 Overview This re...

10CVSS6.8AI score0.16905EPSS
SaveExploits1
OSV
OSV
added 2025/11/25 5:58 p.m.11 views

BIT-GRAFANA-2025-41115 Incorrect privilege assignment

SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management. In Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user...

10CVSS6.6AI score0.16905EPSS
SaveExploits1References2
OSV
OSV
added 2025/11/21 3:31 p.m.8 views

GHSA-W62R-7C53-FMC5 Grafana Incorrect Privilege Assignment vulnerability

SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management. In Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user...

10CVSS6.6AI score0.16905EPSS
SaveExploits1References9
NVD
NVD
added 2025/11/21 3:15 p.m.12 views

CVE-2025-41115

SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management. In Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user...

10CVSS0.16905EPSS
SaveExploits1References1
CVE
CVE
added 2025/11/21 2:25 p.m.553 views

CVE-2025-41115

CVE-2025-41115 affects Grafana Enterprise/Cloud SCIM provisioning in Grafana 12.x+ when enableSCIM is true and user_sync_enabled is enabled. A vulnerability in user identity handling allows a malicious SCIM client to provision a user with a numeric externalId, potentially overriding internal user...

10CVSS6.3AI score0.16905EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2025/11/21 2:25 p.m.6 views

CVE-2025-41115 Incorrect privilege assignment

SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management. In Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user...

10CVSS7.3AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/11/21 2:25 p.m.11 views

CVE-2025-41115 Incorrect privilege assignment

SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management. In Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user...

10CVSS6.3AI score0.16905EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/11/21 2:25 p.m.28 views

CVE-2025-41115 Incorrect privilege assignment

SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management. In Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user...

10CVSS0.16905EPSS
SaveExploits1References1
Fedora
Fedora
added 2025/11/07 1:30 a.m.11 views

[SECURITY] Fedora 42 Update: fcitx5-anthy-5.1.8-1.fc42

Anthy Wrapper for Fcitx5 Ported from scim-anthy. Released under GPL2+...

7AI score
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2019-2970

Malware in sbrugna...

4.3CVSS4.7AI score0.01138EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2019-2962

Malware in sbrugna...

6.1CVSS4.8AI score0.008EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2019-2966

Malware in sbrugna...

8.8CVSS8.7AI score0.01342EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2021-13689

Malware in sbrugna...

6.5CVSS6.6AI score0.01018EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2021-26257

Malware in sbrugna...

4CVSS3.5AI score0.00913EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2021-28239

Malicious code in bioql PyPI...

9.8CVSS8.8AI score0.01075EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2022-45045

Malicious code in bioql PyPI...

3.7CVSS5AI score0.00508EPSS
SaveExploits0References2
Rows per page
Query Builder