Lucene search
+L

18733 matches found

CVE
CVE
added 2026/08/05 4:18 p.m.85 views

CVE-2026-20028

CVE-2026-20028 describes a vulnerability in Cisco Terminal Service (TS) Agent’s network driver that could allow an authenticated, remote attacker to bypass firewall rules tied to the attacker’s account. The issue stems from an incorrect mapping of network connections to user accounts, enabling an...

5CVSS5.6AI score0.00252EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/05 4:05 p.m.15 views

EUVD-2026-53444

IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the...

4.3CVSS5.3AI score0.00116EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/05 12:21 p.m.24 views

Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2024-34459 DESCRIPTION: An issue was discovered in xmllint from libxml2 before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a...

9.8CVSS7.9AI score0.1393EPSS
SaveExploits10Affected Software1
RedHat Linux
RedHat Linux
added 2026/08/04 1:59 p.m.22 views

netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs

A flaw was found in Netty's DNS resolver component. This vulnerability arises from the use of a predictable pseudo-random number generator PRNG for DNS transaction IDs and a static User Datagram Protocol UDP source port. This combination significantly reduces the randomness of DNS queries, making...

6.8CVSS5.5AI score0.00256EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/04 8:16 a.m.12 views

CVE-2026-18753

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...

9.1CVSS0.00313EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/04 7:09 a.m.14 views

EUVD-2026-52638

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...

9.1CVSS5.5AI score0.00313EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/04 7:08 a.m.8 views

CVE-2026-18753

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...

9.1CVSS5.5AI score0.00313EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/08/04 7:08 a.m.76 views

CVE-2026-18753

CVE-2026-18753 concerns GV-AS1620 Controller Firmware (GV-ASManager). The firmware contains an embedded, static RSA private key used by the Lighttpd web server for TLS termination. Exposure of this private key allows attackers to decrypt HTTPS traffic and spoof the server, compromising confidenti...

9.1CVSS5.5AI score0.00313EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/04 7:08 a.m.14 views

EUVD-2026-52637

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...

9.1CVSS5.5AI score0.00313EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/04 5:28 a.m.17 views

CVE-2026-67316

A flaw was found in axios, a widely used JavaScript library for making web requests. This vulnerability, known as prototype pollution, allows an attacker to subtly alter how network requests are built if another part of the system has already been compromised. This could lead to an attacker...

7.4CVSS5.5AI score0.00354EPSS
SaveExploits1References5
NVD
NVD
added 2026/08/03 7:16 p.m.14 views

CVE-2025-15544

A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related...

6.9CVSS0.00201EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/03 7:02 p.m.51 views

CVE-2026-67598 Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php

Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that allows network-adjacent attackers to intercept outbound HTTPS requests to configured LLM providers by presenting arbitrary TLS certificates, as CURLOPTSSLVERIFYPEER and...

9.1CVSS0.00205EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/08/03 5:50 p.m.13 views

EUVD-2025-210611

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related...

6.9CVSS5.5AI score0.00181EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/03 5:50 p.m.59 views

CVE-2025-15629 Weak Session Key Generation in TP-Link Omada Adoption Protocol

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related...

6.9CVSS0.00181EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/03 5:50 p.m.14 views

EUVD-2025-210610

Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An attacker who obtains the embedded certificates may be able to impersonate trusted controllers or devices and intercept affected communications...

8.2CVSS5.5AI score0.00222EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/03 5:49 p.m.8 views

CVE-2025-15544

A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related...

6.9CVSS5.3AI score0.00201EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/03 5:49 p.m.76 views

CVE-2025-15544

CVE-2025-15544 describes a cryptographic weakness in the Omada device adoption process where site management credentials are transmitted using a weak hashing algorithm, potentially allowing an attacker who intercepts adoption traffic to recover valid credentials and gain unauthorized access to ma...

6.9CVSS5.3AI score0.00201EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2026/08/03 4:47 p.m.13 views

axios: axios: Prototype Pollution allows unauthorized data transmission and network redirection

A flaw was found in axios, a widely used JavaScript library for making web requests. This vulnerability, known as prototype pollution, allows an attacker to subtly alter how network requests are built if another part of the system has already been compromised. This could lead to an attacker...

7.4CVSS5.5AI score0.00354EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2026/08/01 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-65981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenticates a resumed REFRESH request with the...

7.1CVSS5.5AI score0.00311EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/07/31 10:14 p.m.22 views

kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle

A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...

9.8CVSS6AI score0.00536EPSS
SaveExploits0References5
Rows per page
Query Builder