Lucene search
+L

51508 matches found

NVD
NVD
added 2026/08/07 8:16 p.m.12 views

CVE-2026-19016

Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the session:write ACL permission for session deletion operations submitted through the transaction API. An authenticated caller with network access to the Consul server RPC port could delete arbitrary sessions...

4.2CVSS0.00213EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/07 8:16 p.m.7 views

DEBIAN-CVE-2026-19016

Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the session:write ACL permission for session deletion operations submitted through the transaction API. An authenticated caller with network access to the Consul server RPC port could delete arbitrary sessions...

4.2CVSS5.5AI score0.00213EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/07 8:16 p.m.6 views

UBUNTU-CVE-2026-19016

Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the session:write ACL permission for session deletion operations submitted through the transaction API. An authenticated caller with network access to the Consul server RPC port could delete arbitrary sessions...

4.2CVSS5.5AI score0.00213EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/07 8:16 p.m.13 views

CVE-2026-19016

Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the session:write ACL permission for session deletion operations submitted through the transaction API. An authenticated caller with network access to the Consul server RPC port could delete arbitrary sessions...

4.2CVSS5.3AI score0.00213EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/07 7:18 p.m.28 views

CVE-2026-19016 Authorization bypass for session deletion in the transaction API

Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the session:write ACL permission for session deletion operations submitted through the transaction API. An authenticated caller with network access to the Consul server RPC port could delete arbitrary sessions...

4.2CVSS0.00213EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/07 7:18 p.m.7 views

CVE-2026-19016 Authorization bypass for session deletion in the transaction API

Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the session:write ACL permission for session deletion operations submitted through the transaction API. An authenticated caller with network access to the Consul server RPC port could delete arbitrary sessions...

4.2CVSS5.4AI score0.00213EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/07 7:18 p.m.10 views

CVE-2026-19016

Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the session:write ACL permission for session deletion operations submitted through the transaction API. An authenticated caller with network access to the Consul server RPC port could delete arbitrary sessions...

4.2CVSS5.4AI score0.00213EPSS
SaveExploits0References2Affected Software2
EUVD
EUVD
added 2026/08/07 7:18 p.m.13 views

EUVD-2026-54605

Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the session:write ACL permission for session deletion operations submitted through the transaction API. An authenticated caller with network access to the Consul server RPC port could delete arbitrary sessions...

4.2CVSS5.4AI score0.00213EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/07 7:18 p.m.14 views

CVE-2026-19016 Authorization bypass for session deletion in the transaction API

Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the session:write ACL permission for session deletion operations submitted through the transaction API. An authenticated caller with network access to the Consul server RPC port could delete arbitrary sessions...

4.2CVSS5.5AI score
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/08/07 7:18 p.m.10 views

CVE-2026-19016

Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the session:write ACL permission for session deletion operations submitted through the transaction API. An authenticated caller with network access to the Consul server RPC port could delete arbitrary sessions...

4.2CVSS5.5AI score0.00213EPSS
SaveExploits0
CVE
CVE
added 2026/08/07 7:02 p.m.72 views

CVE-2025-71410

The CVE-2025-71410 issue affects systems handling Aviation Very High Frequency Link Control (VHF L-C) and Unnumbered Disconnect (U DISC) frames used by CPDLC. Described vulnerability can terminate sessions and cause loss of CPDLC functions, forcing a reversion to voice comms and increasing contro...

6CVSS5.2AI score0.00198EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/07 6:17 p.m.9 views

CVE-2026-47363

In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session including OAuth tokens from Intent extras with no permission guard, and signs the app into that session without validating it against the backend. Th...

6.3CVSS0.00142EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/07 6:02 p.m.47 views

CVE-2026-44964

Summary: CVE-2026-44964 affects the Datadog Android app, where OnCallNotificationActivity is declared with android:exported="true" and no permission guard. This allows any co-installed app to launch the activity with attacker-controlled Intent extras (on_call_page_content, page_id, on_call_page_i...

6.5CVSS5.5AI score0.00191EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/07 6:02 p.m.12 views

EUVD-2026-54568

In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session including OAuth tokens from Intent extras with no permission guard, and signs the app into that session without validating it against the backend. Th...

6.3CVSS5.4AI score0.00142EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/07 6:02 p.m.30 views

CVE-2026-47363

In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session including OAuth tokens from Intent extras with no permission guard, and signs the app into that session without validating it against the backend. Th...

0.00142EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/07 6:02 p.m.52 views

CVE-2026-47363

The CVE-2026-47363 describes a vulnerability in the Datadog Android app where the launcher activity AppActivity is exported with no permission guard and launchMode=singleTask. On every onCreate/onNewIntent, an extension (Intent.getUserSession()) deserializes a full UserSession (including user ide...

6.3CVSS5.4AI score0.00142EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/07 6:02 p.m.12 views

CVE-2026-47363

In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session including OAuth tokens from Intent extras with no permission guard, and signs the app into that session without validating it against the backend. Th...

5.4AI score0.00142EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/07 6:02 p.m.33 views

CVE-2026-44965

In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities IncidentWidgetActivity, MonitorSavedViewWidgetActivity, OnCallShiftsWidgetActivity, OnCallPagesWidgetActivity, SloWidgetActivity, DashboardWidgetActivity are exported with no permission...

0.00113EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/07 6:02 p.m.8 views

CVE-2026-47363

In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session including OAuth tokens from Intent extras with no permission guard, and signs the app into that session without validating it against the backend. Th...

6.3CVSS5.3AI score0.00142EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/08/07 6:02 p.m.10 views

CVE-2026-44965

In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities IncidentWidgetActivity, MonitorSavedViewWidgetActivity, OnCallShiftsWidgetActivity, OnCallPagesWidgetActivity, SloWidgetActivity, DashboardWidgetActivity are exported with no permission...

5.3AI score0.00113EPSS
SaveExploits0References3
Rows per page
Query Builder