Lucene search
K

276205 matches found

CVE
CVE
added 2026/03/24 4:20 a.m.8 views

CVE-2026-4640

The CVE-2026-4640 entry concerns Vitals ESP from Galaxy Software Services, identified in multiple sources (NVD/NIST and CVE List) as a Missing Authentication vulnerability. Unauthenticated remote attackers can access certain functions to obtain sensitive information. Public metrics from TWCERT in...

8.7CVSS5.9AI score0.00383EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2026/03/24 4:17 a.m.2 views

DEBIAN-CVE-2026-4739

Integer Overflow or Wraparound vulnerability in InsightSoftwareConsortium ITK ‎Modules/ThirdParty/Expat/src/expat modules.This issue affects ITK: before 2.7.1...

9.4CVSS5.3AI score0.00276EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/24 4:17 a.m.20 views

CVE-2026-4639 Galaxy Software Services|Vitals ESP - Incorrect Authorization

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS0.00299EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/24 4:17 a.m.3 views

CVE-2026-4639

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS5.8AI score0.00299EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/24 4:17 a.m.2 views

CVE-2026-4639 Galaxy Software Services|Vitals ESP - Incorrect Authorization

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS5.8AI score0.00299EPSS
Exploits0References2
CVE
CVE
added 2026/03/24 4:17 a.m.12 views

CVE-2026-4639

CVE-2026-4639 affects Vitals ESP by Galaxy Software Services. The vulnerability is described as Incorrect Authorization, enabling authenticated remote attackers to perform administrative functions and escalate privileges. The NVD/NVD-derived entries provide CVSS 4.0/3.1 values with HIGH severity ...

8.8CVSS5.8AI score0.00299EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2026/03/24 4:17 a.m.3 views

CVE-2026-4739

Integer Overflow or Wraparound vulnerability in InsightSoftwareConsortium ITK ‎Modules/ThirdParty/Expat/src/expat modules.This issue affects ITK: before 2.7.1...

9.4CVSS5.9AI score0.00276EPSS
Exploits0References2
OSV
OSV
added 2026/03/24 4:17 a.m.8 views

UBUNTU-CVE-2026-4739

Integer Overflow or Wraparound vulnerability in InsightSoftwareConsortium ITK ‎Modules/ThirdParty/Expat/src/expat modules.This issue affects ITK: before 2.7.1...

9.4CVSS5.8AI score0.00276EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2026/03/24 3:19 a.m.2 views

CVE-2026-4739

Integer Overflow or Wraparound vulnerability in InsightSoftwareConsortium ITK ‎Modules/ThirdParty/Expat/src/expat modules.This issue affects ITK: before 2.7.1...

9.4CVSS5.2AI score0.00276EPSS
Exploits0
Cvelist
Cvelist
added 2026/03/24 3:19 a.m.28 views

CVE-2026-4739 Integer overflow vulnerabilities in InsightSoftwareConsortium/ITK

Integer Overflow or Wraparound vulnerability in InsightSoftwareConsortium ITK ‎Modules/ThirdParty/Expat/src/expat modules.This issue affects ITK: before 2.7.1...

9.4CVSS0.00276EPSS
Exploits0References1
CVE
CVE
added 2026/03/24 3:19 a.m.23 views

CVE-2026-4739

InsightSoftwareConsortium ITK’s Expat modules contain an Integer Overflow or Wraparound vulnerability affecting ITK: before 2.7.1. The issue can be triggered remotely and, per Red Hat, could lead to arbitrary code execution or a DoS without authentication. Affected: ITK

9.4CVSS5.8AI score0.00276EPSS
Exploits0References1
AlmaLinux
AlmaLinux
added 2026/03/24 12:0 a.m.3 views

Moderate: opencryptoki security update

The opencryptoki packages contain version 2.11 of the PKCS11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor with the PKCS11 firmware loaded, the IBM eServer Cryptographic Accelerator FC 4960 ...

6.8CVSS5.8AI score0.00162EPSS
Exploits0References4
AlmaLinux
AlmaLinux
added 2026/03/24 12:0 a.m.10 views

Moderate: opencryptoki security update

The opencryptoki packages contain version 2.11 of the PKCS11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor with the PKCS11 firmware loaded, the IBM eServer Cryptographic Accelerator FC 4960 ...

6.8CVSS5.8AI score0.00162EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.7 views

River Past Cam Do 代码问题漏洞

River Past Cam Do is a multimedia tool software for screen recording and video capture, developed by FlexHEX. Version 3.7.6 of River Past Cam Do contains a code vulnerability. This vulnerability stems from a local buffer overflow in the activation code input field, which could allow local attacke...

8.6CVSS6.4AI score0.00242EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/03/24 12:0 a.m.4 views

PT-2026-27317

Name of the Vulnerable Software and Affected Versions InsightSoftwareConsortium ITK versions prior to 2.7.1 Description An integer overflow or wraparound condition exists in the Expat parser within the ITK software. This issue is network-reachable and allows for automatable exploitation. The...

9.4CVSS5.8AI score0.00276EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/03/24 12:0 a.m.4 views

PT-2026-27329

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS5.8AI score0.00299EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/03/24 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-33186

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2...

9.1CVSS6.5AI score0.00522EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/03/24 12:0 a.m.4 views

PT-2026-27610

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.4 iPadOS versions prior to 26.4 macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions prior to 26.4 Description An issue exists that may allow a remote attacker to cause a...

7.5CVSS5.9AI score0.00665EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2026/03/24 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-4677

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via a crafte...

8.8CVSS7.3AI score0.00447EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.5 views

ITK 安全漏洞

ITK is an open-source cross-platform tool suite for scientific image processing and segmentation, developed by the Insight Software Consortium. Versions of ITK prior to 2.7.1 contained security vulnerabilities, which were caused by integer overflow or circularity errors...

9.4CVSS5.9AI score0.00276EPSS
Exploits0References2
Rows per page
Query Builder