Lucene search
K

474 matches found

OSV
OSV
added 3 days ago4 views

GO-2026-4960 Neko has a Self-service Privilege Escalation for Authenticated Users in github.com/m1k1o/neko/server

Neko has a Self-service Privilege Escalation for Authenticated Users in github.com/m1k1o/neko/server...

8.8CVSS5.8AI score0.00051EPSS
Exploits0References5
EUVD
EUVD
added last week4 views

EUVD-2026-33049

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite component: Self Service Manager. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful...

8.8CVSS5.8AI score0.00044EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/28 12:0 a.m.6 views

Oracle Payroll 安全漏洞

Oracle Payroll is an enterprise payroll calculation and payment management system developed by Oracle, a company in the United States. Versions 12.2.3 to 12.2.15 of Oracle Payroll contain security vulnerabilities. These vulnerabilities stem from issues with the Self Service Manager component, whi...

8.8CVSS5.8AI score0.00044EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/21 12:36 p.m.1 views

CVE-2026-2740

Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus before 6313 are vulnerable to Authenticated Remote code execution in the agent machines due to the bug in the 3rd party dependency...

8.4CVSS6.2AI score0.01394EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2026/04/22 2:56 p.m.1 views

Critical: Red Hat Security Advisory: Red Hat Developer Hub 1.8.6 release.

Red Hat Developer Hub 1.8.6 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

9.9CVSS7AI score0.02042EPSS
Exploits19References55
OSV
OSV
added 2026/04/21 5:24 p.m.2 views

GHSA-2GW9-C2R2-F5QF Neko has a Self-service Privilege Escalation for Authenticated Users

Impact Any authenticated user can immediately obtain full administrative control of the entire Neko instance member management, room settings, broadcast control, session termination, etc.. This results in a complete compromise of the instance. Patches The vulnerability has been patched in the...

8.8CVSS5.7AI score0.00051EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2026/04/07 1:22 p.m.2 views

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.9.3 release.

Red Hat Developer Hub 1.9.3 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

9.8CVSS5.8AI score0.00398EPSS
Exploits8References20
RedHat Linux
RedHat Linux
added 2026/03/30 12:51 p.m.1 views

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.8.5 release.

Red Hat Developer Hub 1.8.5 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

9.8CVSS7AI score0.00398EPSS
Exploits7References28
Snyk
Snyk
added 2026/02/26 10:45 p.m.1 views

Improper Authentication

Overview n8n is a n8n Workflow Automation Tool Affected versions of this package are vulnerable to Improper Authentication via the Self-Service Settings API. An attacker can circumvent centralized identity management and multi-factor authentication by disabling SSO enforcement for their own accou...

6CVSS6AI score
Exploits0References4
Snyk
Snyk
added 2026/02/26 10:45 p.m.2 views

Improper Authentication

Overview @n8n/rest-api-client is a This package contains the REST API calls for n8n. Affected versions of this package are vulnerable to Improper Authentication via the Self-Service Settings API. An attacker can circumvent centralized identity management and multi-factor authentication by disabli...

6CVSS6AI score
Exploits0References4
OSV
OSV
added 2026/02/26 10:45 p.m.1 views

GHSA-VJF3-2GPJ-233V n8n has an SSO Enforcement Bypass in its Self-Service Settings API

Impact An authenticated user signed in through Single Sign-On SSO could disable SSO enforcement for their own account through the n8n API. This allowed the user to create a local password and authenticate directly with email and password, completely bypassing the organization's SSO policy,...

6.3CVSS5.4AI score
Exploits0References4
Snyk
Snyk
added 2026/02/26 10:45 p.m.1 views

Improper Authentication

Overview @n8n/api-types is a fair-code workflow automation platform with native AI capabilities Affected versions of this package are vulnerable to Improper Authentication via the Self-Service Settings API. An attacker can circumvent centralized identity management and multi-factor authentication...

6CVSS6AI score
Exploits0References4
Github Security Blog
Github Security Blog
added 2026/02/26 10:45 p.m.2 views

n8n has an SSO Enforcement Bypass in its Self-Service Settings API

Impact An authenticated user signed in through Single Sign-On SSO could disable SSO enforcement for their own account through the n8n API. This allowed the user to create a local password and authenticate directly with email and password, completely bypassing the organization's SSO policy,...

5.3AI score
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.2 views

Tanium EUSS 安全漏洞

Tanium EUSS is a terminal user self-service software developed by the American company Tanium. Tanium EUSS has a security vulnerability that stems from the ability to delete arbitrary files...

7.1CVSS5.9AI score0.00013EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2026/02/05 6:57 p.m.3 views

Important: Red Hat Security Advisory: Self-service automation portal 2.1 security update

Updated images are now available for Self-service automation portal 2.1, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub. Self-service automation portal 2.1 delivers an Ansible-first Red Hat Developer Hub user...

9.8CVSS5.8AI score0.00089EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2026/02/05 6:48 p.m.4 views

Important: Red Hat Security Advisory: Self-service automation portal 2.0 security update

Updated images are now available for Self-service automation portal 2.0, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub. Self-service automation portal 2.0 delivers an Ansible-first Red Hat Developer Hub user...

9.8CVSS5.8AI score0.00089EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/02/04 12:0 a.m.3 views

SAMSUNG GalaxyDiagnostics 安全漏洞

Samsung GalaxyDiagnostics is a set of self-service hardware testing tools developed by South Korean company Samsung. Previous versions of Samsung GalaxyDiagnostics, such as 3.5.050, contained security vulnerabilities. These vulnerabilities were due to improper input validation, which could allow...

8.7CVSS5.9AI score0.00006EPSS
Exploits0References2
Virtuozzo
Virtuozzo
added 2026/01/20 12:0 a.m.7 views

Virtuozzo Hybrid Infrastructure 7.2 (7.2.0-246)

In this release, Virtuozzo Hybrid Infrastructure introduces support for two-factor authentication 2FA for system administrators and self-service users, along with several other new features and improvements. Additionally, this release delivers stability fixes and addresses issues found in previou...

5.6AI score
Exploits0
RedHat Linux
RedHat Linux
added 2026/01/13 9:28 p.m.5 views

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.8.2 release.

Red Hat Developer Hub 1.8.2 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

7.5CVSS6.5AI score0.0004EPSS
Exploits3References10
OSV
OSV
added 2026/01/13 2:16 p.m.0 views

CVE-2025-11250

Zohocorp ManageEngine ADSelfService Plus versions before 6519 are vulnerable to Authentication Bypass due to improper filter configurations...

9.1CVSS5.8AI score0.00122EPSS
Exploits0References1
Rows per page
Query Builder