Lucene search
K

276205 matches found

CNNVD
CNNVD
added 2026/03/18 12:0 a.m.6 views

Arturia Software Center 安全漏洞

The Arturia Software Center is an application developed by the French company Arturia, used for managing, installing, and updating music production software and plugins. The Arturia Software Center has a security vulnerability, which stems from insufficient client-side code signature verification...

7.8CVSS5.9AI score0.00122EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2026/03/18 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-32609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. The GHSA-gh4x fix commit 5d3de60 addressed unauthenticated configuration secrets exposure on th...

7.5CVSS5.5AI score0.00499EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/03/18 12:0 a.m.9 views

PT-2026-26066

The "Privileged Helper" component of the Arturia Software Center MacOS does not perform sufficient client code signature validation when a client connects. This leads to an attacker being able to connect to the helper and execute privileged actions leading to local privilege escalation...

7.8CVSS5.9AI score0.00122EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/03/18 12:0 a.m.9 views

GLPI 授权问题漏洞

GLPI is an open-source IT and asset management software developed by GLPI. This software provides a comprehensive IT resource management interface, allowing you to create databases to manage various IT assets such as computers, monitors, servers, printers, network devices, telephones, and even...

6.5CVSS5.8AI score0.00292EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/17 11:16 p.m.31 views

CVE-2026-25937 GLPI has a MFA bypass

GLPI is a free Asset and IT management software package. Starting in version 11.0.0 and prior to version 11.0.6, a malicious actor with knowledge of a user's credentials can bypass MFA and steal their account. Version 11.0.6 fixes the issue...

6.5CVSS0.00292EPSS
Exploits0References1
OSV
OSV
added 2026/03/17 11:16 p.m.7 views

CVE-2026-25937 GLPI has a MFA bypass

GLPI is a free Asset and IT management software package. Starting in version 11.0.0 and prior to version 11.0.6, a malicious actor with knowledge of a user's credentials can bypass MFA and steal their account. Version 11.0.6 fixes the issue...

6.5CVSS5.9AI score0.00292EPSS
Exploits0References3
OSV
OSV
added 2026/03/17 8:16 p.m.3 views

UBUNTU-CVE-2026-25936

GLPI is a free Asset and IT management software package. Starting in version 11.0.0 and prior to version 11.0.6, an authenticated user can perfom a SQL injection. Version 11.0.6 fixes the issue...

8.8CVSS5.9AI score0.00339EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2026/03/17 12:43 p.m.127 views

aicerberus

AICerberus 🐺 AI supply chain security scanner — one comma...

6.2AI score
Exploits0
EUVD
EUVD
added 2026/03/17 9:31 a.m.4 views

EUVD-2026-12547

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

9.8CVSS5.9AI score0.0045EPSS
Exploits0References3
NVD
NVD
added 2026/03/17 8:15 a.m.4 views

CVE-2026-4312

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

9.8CVSS0.0045EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/17 7:29 a.m.30 views

CVE-2026-4312 DrangSoft|GCB/FCB Audit Software - Missing Authentication

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

9.8CVSS0.0045EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/17 7:29 a.m.4 views

CVE-2026-4312 DrangSoft|GCB/FCB Audit Software - Missing Authentication

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

9.8CVSS5.9AI score0.0045EPSS
Exploits0References2
CVE
CVE
added 2026/03/17 7:29 a.m.13 views

CVE-2026-4312

Affected product: DrangSoft GCB/FCB Audit Software. Vulnerability: Missing Authentication, enabling unauthenticated remote attackers to directly access APIs and create a new administrative account. Impact/risks: High impact on confidentiality, integrity, and availability as per CVSS metrics (CRIT...

9.8CVSS5.9AI score0.0045EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/17 7:29 a.m.4 views

CVE-2026-4312

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

9.8CVSS5.9AI score0.0045EPSS
Exploits0References3
Fedora
Fedora
added 2026/03/17 2:12 a.m.8 views

[SECURITY] Fedora 42 Update: mingw-openexr-3.3.8-1.fc42

MinGW Windows openexr library...

8.4CVSS5.8AI score0.00523EPSS
Exploits3
ATTACKERKB
ATTACKERKB
added 2026/03/17 12:0 a.m.0 views

CVE-2026-30707

An issue was discovered in SpeedExam Online Examination System SaaS after v.FEV2026. It allows Broken Access Control via the ReviewAnswerDetails ASP.NET PageMethod. Authenticated attackers can bypass client-side restrictions and invoke this method directly to retrieve the full answer key. The...

8.1CVSS5.8AI score0.00329EPSS
Exploits0References3
CNVD
CNVD
added 2026/03/17 12:0 a.m.4 views

Siemens SICAM SIAPP SDK Out-of-Bounds Write Vulnerability

Siemens SICAM SIAPP SDK is a software development kit from Siemens, Germany. The Siemens SICAM SIAPP SDK contains an out-of-bounds write vulnerability that can be exploited by an attacker to cause a denial of service or execute arbitrary code...

7.8CVSS6.1AI score0.00143EPSS
Exploits0
CNNVD
CNNVD
added 2026/03/17 12:0 a.m.5 views

DrangSoft GCB/FCB Audit Software 访问控制错误漏洞

DrangSoft GCB/FCB Audit Software is a financial statement auditing software developed by DrangSoft Corporation in China. DrangSoft GCB/FCB Audit Software has a vulnerability related to access control. This vulnerability stems from the lack of authentication, which may allow unverified remote...

9.8CVSS5.8AI score0.0045EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/17 12:0 a.m.7 views

GLPI SQL注入漏洞

GLPI is an open-source IT and asset management software developed by GLPI. This software provides a comprehensive IT resource management interface, allowing you to create databases for managing various IT assets such as computers, monitors, servers, printers, network devices, telephones, and even...

8.8CVSS6AI score0.00339EPSS
Exploits0References1
OSV
OSV
added 2026/03/17 12:0 a.m.4 views

ALSA-2026:4717 Moderate: opencryptoki security update

The opencryptoki packages contain version 2.11 of the PKCS11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor with the PKCS11 firmware loaded, the IBM eServer Cryptographic Accelerator FC 4960 ...

6.8CVSS5.8AI score0.00162EPSS
Exploits0References4
Rows per page
Query Builder