Lucene search
+L

13 matches found

NVD
NVD
•added 2026/10/08 3:16 a.m.•22 views

CVE-2026-87686

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socke...

5.3CVSS0.00176EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/08 2:31 a.m.•21 views

CVE-2026-87686

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1 . The vulnerability is caused by the web dispatcher routine evaluating internal management VLAN trust decisions based on the client-supplied HTTP hos...

5.3CVSS5.8AI score0.00176EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/10/08 2:31 a.m.•12 views

CVE-2026-87686

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socke...

5.3CVSS5.8AI score0.00176EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/08 2:31 a.m.•11 views

EUVD-2026-94670

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socke...

5.3CVSS5.8AI score0.00176EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•8 views

CVE-2026-87686: Authentication Bypass by Spoofing

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socke...

5.3CVSS5.8AI score0.00176EPSS
SaveExploits0References3
Broadcom
Broadcom
•added 2026/10/06 12:00 a.m.•21 views

Brocade Fabric OS authentication and access control bypass via HTTP host header spoofing

: An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual...

5.3CVSS5.8AI score0.00176EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/02/20 12:00 a.m.•19 views

Xerox Workplace Suite Unauthorized Access

The vulnerability of the Xerox Workplace Suite print server management interface is related to deficiencies in the authentication process when processing Host headers. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.5CVSS6.5AI score0.00363EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2024/03/27 12:00 a.m.•11 views

Cockpit 命令注入漏洞

Cockpit is an interactive server management interface. Cockpit is vulnerable to a command injection vulnerability that stems from the presence of a command injection vulnerability...

7.3CVSS7.5AI score0.01191EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/09/21 12:00 a.m.•2 views

PT-2021-23284

Name of the Vulnerable Software and Affected Versions Plastic SCM versions prior to 10.0.16.5622 Description The issue is related to the mishandling of the WebAdmin server management interface in Plastic SCM. Recommendations For versions prior to 10.0.16.5622, update to version 10.0.16.5622 or...

7.5CVSS0.08939EPSS
SaveExploits4References7
seebug.org
seebug.org
•added 2009/12/18 12:00 a.m.•208 views

zeus 4.2 服务器管理接口XSS漏洞

No description provided by source...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/07/15 12:00 a.m.•11 views

CVE-2007-3769: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the mirrored server management interface in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to inject arbitrary web script or HTML via a malformed response without a status code, which is reflected to the user in the resulting error message. NOTE:...

5.8CVSS6AI score0.01163EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2006/08/17 12:00 a.m.•51 views

SYM06-16 Symantec NetBackup PureDisk Remote Office Edition Elevation of Privilege

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Symantec Security Advisory SYM06-015 16 August 2006 Symantec NetBackup PureDisk: Non-Privileged User Authentication Bypass Elevation of Privilege Revision History None Severity Medium highly dependent on network configuration Remote Access Yes Local...

0.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2006/05/08 12:00 a.m.•62 views

OpenVPN Unprotected Management Interface

The remote host is running OpenVPN, an open source SSL VPN. The version of OpenVPN installed on the remote host does not require authentication to access the server's management interface. An attacker can leverage this issue to gain complete control over the affected application simply by telneti...

4CVSS5.6AI score0.01346EPSS
SaveExploits0References3
Rows per page
Query Builder