Lucene search
+L

24 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:38 p.m.17 views

CVE-2026-21742

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1,...

6.5CVSS5.4AI score0.00148EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/14 6:30 p.m.4 views

EUVD-2026-22315

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1,...

5.7CVSS5.8AI score0.00148EPSS
Exploits0References2
NVD
NVD
added 2026/04/14 4:16 p.m.4 views

CVE-2026-21742

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1,...

6.5CVSS0.00148EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/14 3:38 p.m.3 views

CVE-2026-21742

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1,...

5.7CVSS5.8AI score0.00148EPSS
Exploits0References1
CVE
CVE
added 2026/04/14 3:38 p.m.20 views

CVE-2026-21742

Fortinet FortiSOAR products are affected by CVE-2026-21742, a cleartext transmission vulnerability that could allow an authenticated attacker to view cleartext passwords in responses for Secure Message Exchange and Radius queries when configured. Affected: FortiSOAR PaaS versions 7.6.0–7.6.3, 7.5...

6.5CVSS5.8AI score0.00148EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/04/14 3:38 p.m.33 views

CVE-2026-21742

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1,...

5.7CVSS0.00148EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.6 views

PT-2026-32663

Name of the Vulnerable Software and Affected Versions FortiSOAR PaaS versions 7.6.0 through 7.6.3 FortiSOAR PaaS versions 7.5.0 through 7.5.2 FortiSOAR PaaS versions 7.4 FortiSOAR PaaS versions 7.3 FortiSOAR on-premise versions 7.6.0 through 7.6.2 FortiSOAR on-premise versions 7.5.0 through 7.5.1...

6.8CVSS6.4AI score0.00148EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/02/25 12:0 a.m.10 views

OpenEMR 安全漏洞

OpenEMR is a set of open-source medical management systems developed by the OpenEMR community. This system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. Versions of OpenEMR prior to 7.0.4 contained security...

7.2CVSS5.8AI score0.00157EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-22343

Malicious code in bioql PyPI...

7.7CVSS6.5AI score0.0035EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/24 5:21 p.m.14 views

CVE-2025-6741

Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unauthorized entries via the secure message entry attachment feature This issue affects the following versions : Devolutions Server 2025.2.2.0 through 2025.2.4.0 Devolutions Server...

7.7CVSS6.2AI score0.0035EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/07/24 12:0 a.m.4 views

Devolutions Server <= 2025.1.11.0 / 2025.2.2.0 < 2025.2.5.0 Improper Access Control (DEVO-2025-0012) (CVE-2025-6741)

The version of Devolutions Server installed on the remote host is prior to 2025.1.11.0 or 2025.2.2.0 prior to 2025.2.5.0 and is, therefore, affected by an improper access control vulnerability: - Improper access control in secure message component in Devolutions Server allows an authenticated use...

7.7CVSS5.6AI score0.0035EPSS
Exploits0References2
NVD
NVD
added 2025/07/22 5:15 p.m.5 views

CVE-2025-6741

Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unauthorized entries via the secure message entry attachment feature This issue affects the following versions : Devolutions Server 2025.2.2.0 through 2025.2.4.0 Devolutions Server...

7.7CVSS0.0035EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/07/22 5:0 p.m.12 views

CVE-2025-6741

Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unauthorized entries via the secure message entry attachment feature This issue affects the following versions : Devolutions Server 2025.2.2.0 through 2025.2.4.0 Devolutions Server...

7.1CVSS0.0035EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/07/22 12:0 a.m.8 views

PT-2025-30445 · Devolutions · Devolutions Server

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2025.1.11.0 and earlier Devolutions Server versions 2025.2.2.0 through 2025.2.4.0 Description: Improper access control in the secure message component of Devolutions Server allows an authenticated user to steal...

7.7CVSS6.2AI score0.0035EPSS
Exploits0References7
CNNVD
CNNVD
added 2022/07/06 12:0 a.m.6 views

Devolutions Server 跨站脚本漏洞

Devolutions Server is an application from Devolutions Canada. It provides a full-featured shared account and password management solution. A security vulnerability exists in versions of Devolutions Server prior to 2022.2, which stems from the fact that some HTML tags can be injected into the head...

5.4CVSS5.8AI score0.0053EPSS
Exploits0References2
OSV
OSV
added 2017/12/27 5:8 p.m.3 views

DEBIAN-CVE-2017-17848

An issue was discovered in Enigmail before 1.9.9. In a variant of CVE-2017-17847, signature spoofing is possible for multipart/related messages because a signed message part can be referenced with a cid: URI but not actually displayed. In other words, the entire containing message appears to be...

7.5CVSS8AI score0.01843EPSS
Exploits0References1
Cisco Threats
Cisco Threats
added 2015/10/22 8:26 p.m.12 views

Threat Outbreak Alert RuleID18906: Email Messages Distributing Malicious Software on October 22, 2015

Medium Alert ID: 41679 First Published: 2015 October 22 20:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18906 may contain the following files: Name |...

0.3AI score
Exploits0
Cisco Threats
Cisco Threats
added 2014/03/05 2:15 p.m.10 views

Threat Outbreak Alert: Fake Secure Message Delivery Notification Email Messages on March 4, 2014

Medium Alert ID: 33170 First Published: 2014 March 5 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a secure message attachment for the recipient. The text in the email message attempts to convince the recipient t...

0.3AI score
Exploits0
Cisco Threats
Cisco Threats
added 2014/02/05 3:40 p.m.30 views

Threat Outbreak Alert: Fake Secure Message Delivery Notification Email Messages on February 5, 2014

Medium Alert ID: 32730 First Published: 2014 February 5 15:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a secure message for the recipient. The text in the email message attempts to convince the recipient to open t...

0.7AI score
Exploits0
Cisco Threats
Cisco Threats
added 2013/11/20 1:54 p.m.16 views

Threat Outbreak Alert: Fake Secure Message Delivery Email Messages on August 18, 2014

Medium Alert ID: 31830 First Published: 2013 November 20 13:54 GMT Last Updated: 2014 August 19 12:36 GMT Version: 7 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a secure message for the recipient. The text in the email message...

7AI score
Exploits0
Rows per page
Query Builder