Lucene search
+L

8 matches found

EUVD
EUVD
•added 2026/05/29 12:38 a.m.•34 views

EUVD-2026-33074

In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags...

5.3CVSS5.9AI score0.00427EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/05/28 9:53 p.m.•21 views

CVE-2026-49299

In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags...

5.3CVSS6AI score
SaveExploits0References7
EUVD
EUVD
•added 2026/03/18 6:31 a.m.•24 views

EUVD-2026-12766

FUXA Unauthenticated Remote Arbitrary Device Tag Write...

9.3CVSS5.8AI score0.00866EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2026/02/06 7:05 p.m.•61 views

CVE-2026-25752 FUXA Unauthenticated Remote Arbitrary Device Tag Write

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. An authorization bypass vulnerability in FUXA allows an unauthenticated, remote attacker to modify device tags via WebSockets. Exploitation allows an unauthenticated, remote attacker to bypass role-based access controls and...

9.3CVSS0.00738EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/02/06 7:05 p.m.•19 views

CVE-2026-25752 FUXA Unauthenticated Remote Arbitrary Device Tag Write

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. An authorization bypass vulnerability in FUXA allows an unauthenticated, remote attacker to modify device tags via WebSockets. Exploitation allows an unauthenticated, remote attacker to bypass role-based access controls and...

9.3CVSS5.5AI score
SaveExploits0References4
CVE
CVE
•added 2026/02/06 7:05 p.m.•51 views

CVE-2026-25752

CVE-2026-25752 - FUXA Unauthenticated Remote Arbitrary Device Tag Write Affected product: FUXA web-based SCADA/HMI/dashboard. The issue is an authorization bypass that lets an unauthenticated, remote attacker modify device tags via WebSockets, bypassing role-based access controls and overwriting ...

9.3CVSS6.1AI score0.00738EPSS
SaveExploits0References2Affected Software1
osv_ghsa
osv_ghsa
•added 2026/02/05 12:38 a.m.•28 views

GHSA-GGXW-G3CP-MGF8 FUXA Unauthenticated Remote Arbitrary Device Tag Write

Summary Description An authorization bypass vulnerability in FUXA allows an unauthenticated, remote attacker to modify device tags via WebSockets. This affects FUXA through version 1.2.9. This issue has been patched in FUXA version 1.2.10. Impact This affects all deployments, including those...

9.3CVSS6.1AI score0.00738EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/12/02 12:00 a.m.•24 views

Singularity 安全漏洞

Singularity is an open source container platform open sourced by Sylabs Inc. A security vulnerability exists in singularity that stems from a possible redirection of an LSM tag write operation, which could lead to the failure of security restrictions...

4.5CVSS8AI score0.0016EPSS
SaveExploits0References6
Rows per page
Query Builder