Lucene search
+L

76 matches found

NVD
NVD
•added 2026/10/13 7:21 p.m.•11 views

CVE-2026-96858

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally...

5.5CVSS0.00462EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:01 p.m.•32 views

CVE-2026-96858

A missing authentication vulnerability in the Windows Security Account Manager allows an authorized attacker to perform tampering locally . The root cause is identified as CWE-306 . While no specific exploit code is provided, the vulnerability has an official fix available via Microsoft. Detailed...

5.5CVSS5.8AI score0.00462EPSS
SaveExploits0References1Affected Software9
EUVD
EUVD
•added 2026/10/13 7:01 p.m.•15 views

EUVD-2026-100237

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally...

5.5CVSS5.8AI score0.00462EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•12 views

Windows Security Account Manager Tampering Vulnerability

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally...

5.5CVSS6AI score0.00462EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-113105

Name of the Vulnerable Software and Affected Versions Windows Security Account Manager affected versions not specified Description A missing authentication flaw in a critical function allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At the...

5.5CVSS5.8AI score0.00462EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

Microsoft Windows: CVE-2026-96858: Windows Security Account Manager Tampering Vulnerability

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally...

5.5CVSS5.8AI score0.00462EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-96858: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally...

5.5CVSS5.8AI score0.00462EPSS
SaveExploits0References3
Circl
Circl
•added 2026/09/09 1:47 a.m.•45 views

CVE-2026-67401

creationtimestamp| type| source ---|---|--- 2026-09-09 01:47:32+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mv2g6go54o2t 2026-09-09 08:24:51+00:00| seen| https://bsky.app/profile/uutis.bsky.social/post/3mv34etv6xs25 2026-09-09 09:00:51+00:00| seen|...

9.9CVSS8.6AI score0.00861EPSS
SaveExploits4References27
Circl
Circl
•added 2026/08/30 4:02 p.m.•26 views

CVE-2026-82653

creationtimestamp| type| source ---|---|--- 2026-08-30 16:02:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucrb67gkf27 2026-08-30 16:07:19+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mucrkndz762c 2026-08-30 16:10:07+00:00| seen|...

9.3CVSS5.8AI score0.00366EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/05/29 12:00 a.m.•67 views

SUSE SLES12 Security Update : samba (SUSE-SU-2026:2073-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2073-1 advisory. This update for samba fixes the following issues - CVE-2026-2340: vfsworm does not block directory modification bsc1261158. - CVE-2026-3238:...

9.8CVSS7.4AI score0.1393EPSS
SaveExploits12References13
Debian CVE
Debian CVE
•added 2026/05/28 7:25 a.m.•35 views

CVE-2026-4408

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper...

9.8CVSS8AI score0.02501EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2024-51116

Malicious code in bioql PyPI...

9.1CVSS6.6AI score0.00487EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/22 7:17 p.m.•30 views

CVE-2025-0352

Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/20 8:15 p.m.•34 views

CVE-2025-0352

Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users...

8.7CVSS0.00358EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/20 7:15 p.m.•20 views

CVE-2025-0352 Rapid Response Monitoring My Security Account App Authorization Bypass Through User-Controlled Key

Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/20 7:15 p.m.•36 views

CVE-2025-0352 Rapid Response Monitoring My Security Account App Authorization Bypass Through User-Controlled Key

Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users...

8.7CVSS0.00358EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/20 7:15 p.m.•164 views

CVE-2025-0352

CVE-2025-0352 concerns the Rapid Response Monitoring My Security Account App. The vulnerability arises from an API that could be tampered to modify request data, potentially causing the API to return information about other users. Publicly cited sources (NVD, Red Hat, CVE list, CISA ICS advisory)...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References2
CISA
CISA
•added 2025/02/20 12:00 p.m.•10 views

CISA Releases Seven Industrial Control Systems Advisories

CISA released seven Industrial Control Systems ICS advisories on February 20, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-051-01 ABB ASPECT-Enterprise, NEXUS, and MATRIX Series ICSA-25-051-02 ABB FLXEON...

7AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/02/20 12:00 a.m.•12 views

PT-2025-7458

Name of the Vulnerable Software and Affected Versions Rapid Response Monitoring My Security Account App affected versions not specified Description The issue concerns an API utilized by the Rapid Response Monitoring My Security Account App, which could be exploited by an attacker to modify reques...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/20 12:00 a.m.•12 views

CVE-2025-0352: Authorization Bypass Through User-Controlled Key

Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References1
Rows per page
Query Builder