Lucene search
K

250 matches found

RedhatCVE
RedhatCVE
added yesterday5 views

CVE-2026-52911

A flaw was found in the ksmbd component of the Linux kernel. This vulnerability allows an attacker to gain unauthorized access to session information or resources by exploiting an improper scope in the session binding mechanism. This could potentially compromise the integrity or confidentiality o...

5.8AI score
Exploits0References4
CVE
CVE
added 2026/04/23 9:58 p.m.12 views

CVE-2026-41350

CVE-2026-41350 affects OpenClaw prior to 2026.3.31, where the session_status function fails to enforce tools.sessions.visibility restrictions for unsandboxed invocations. This allows attackers to invoke session_status without sandbox constraints, bypassing session-policy controls and accessing re...

5.3CVSS5.8AI score0.00199EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2026/04/01 6:36 p.m.2 views

EUVD-2026-17955

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access. This vulnerability is due to improper authorization...

8CVSS5.9AI score0.0027EPSS
Exploits0References2
NVD
NVD
added 2026/04/01 5:28 p.m.2 views

CVE-2026-20155

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access. This vulnerability is due to improper authorization...

8CVSS0.0027EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/01 4:29 p.m.23 views

CVE-2026-20155 Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access. This vulnerability is due to improper authorization...

8CVSS0.0027EPSS
Exploits0References1
CVE
CVE
added 2026/04/01 4:29 p.m.57 views

CVE-2026-20155

Cisco EPNM has a REST API authorization flaw in its web-based management interface. An authenticated user with low privileges can query a REST endpoint and potentially view session information of active EPNM users, including administrators, which could lead to device compromise. The provided sour...

8CVSS5.9AI score0.0027EPSS
Exploits0References1
Cisco
Cisco
added 2026/04/01 4:0 p.m.13 views

Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access. This vulnerability is due to improper authorization...

8CVSS5.9AI score0.0027EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/01 12:0 a.m.3 views

PT-2026-29562

Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability CVE: CVE-2026-20155 PT ID: PT-2026-29562 Vendor: Cisco Product: Cisco Evolved Programmable Network Manager EPNM CVSS: 8.0 Credits: n/a Description: A vulnerability in the web-based management interface of Cisco Evolve...

8CVSS5.9AI score0.0027EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 9:24 a.m.11 views

CVE-2023-40314

Cross-site scripting in bootstrap.jsp in multiple versions of OpenNMS Meridian and Horizon allows an attacker access to confidential session information. The solution is to upgrade to Horizon 32.0.5 or newer and Meridian 2023.1.9 or newer Meridian and Horizon installation instructions state that...

6.1CVSS6.4AI score0.00435EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/04 8:45 p.m.2 views

EUVD-2025-201276

Solstice Pod API version 5.5, 6.2 contains an unauthenticated API endpoint /api/config that exposes sensitive information such as the session key, server version, product details, and display name. Unauthorized users can extract live session information by accessing this endpoint without...

6.9CVSS6.3AI score0.00264EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/12/04 12:0 a.m.3 views

Mersive Solstice Pod API 安全漏洞

The Mersive Solstice Pod API is an application programming interface from Mersive USA. A security vulnerability exists in Mersive Solstice Pod API versions 5.5 and 6.2, which originates from an unauthenticated api/config endpoint that exposes sensitive information, potentially leading to session...

7.5CVSS6.5AI score0.00264EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2020-28751

Malware in sbrugna...

9.3CVSS7.5AI score0.01403EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-6582

Malware in sbrugna...

6.1CVSS6.3AI score0.00675EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-6184

Malware in sbrugna...

7.5CVSS7.5AI score0.01165EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2001-0399

Malware in sbrugna...

7.5CVSS6.4AI score0.02445EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-13350

Malware in sbrugna...

7.8CVSS6.5AI score0.00349EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-3806

Malware in sbrugna...

5CVSS6.4AI score0.07331EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2016-5849

Malware in sbrugna...

6.5CVSS6.6AI score0.02023EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-15417

Malware in sbrugna...

5.3CVSS5.5AI score0.00978EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-6583

Malware in sbrugna...

6.1CVSS6.3AI score0.00675EPSS
Exploits1References2
Rows per page
Query Builder