Lucene search
K

7 matches found

Vulnrichment
Vulnrichment
added 2026/04/28 6:9 p.m.1 views

CVE-2026-41378 OpenClaw < 2026.3.31 - Privilege Escalation to Remote Code Execution via Unrestricted node.event Agent Dispatch

OpenClaw before 2026.3.31 contains a privilege escalation vulnerability allowing paired nodes with role=node to dispatch node.event agent requests with unrestricted gateway-side tool access. Attackers with trusted paired node credentials can escalate privileges by leveraging unrestricted...

8.8CVSS6.3AI score0.00285EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 4:29 a.m.6 views

CVE-2023-44478

Cross-Site Request Forgery CSRF vulnerability in WP Hive Events Rich Snippets for Google allows Exploitation of Trusted Credentials.This issue affects Events Rich Snippets for Google: from n/a through 1.8...

7.1CVSS7AI score0.00123EPSS
Exploits0
NVD
NVD
added 2024/05/17 9:15 a.m.10 views

CVE-2023-44478

Cross-Site Request Forgery CSRF vulnerability in WP Hive Events Rich Snippets for Google allows Exploitation of Trusted Credentials.This issue affects Events Rich Snippets for Google: from n/a through 1.8...

7.1CVSS6.9AI score0.00123EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2023/02/14 9:14 p.m.40 views

Security Bulletin: IBM CICS TX Standard is vulnerable to a stored cross-site scripting attack (CVE-2022-34167)

Summary IBM CICS TX Standard could allow users to embed arbitrary JavaScript code which may allow trusted credentials disclosure. The fix removes this vulnerability CVE-2022-34167 from IBM CICS TX Standard. Vulnerability Details CVEID:CVE-2022-34167 DESCRIPTION: IBM CICS TX is vulnerable to store...

5.4CVSS5.1AI score0.00277EPSS
Exploits0Affected Software1
OSV
OSV
added 2018/04/04 1:29 p.m.1 views

CVE-2017-3966

Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management NSM before 8.2.7.42.2 allows remote attackers to exploit or harm a user's browser via reusing the exposed session token in the application URL...

6.3CVSS5.8AI score0.00221EPSS
Exploits0References1
CVE
CVE
added 2018/04/04 1:0 p.m.41 views

CVE-2017-3966

CVE-2017-3966 affects the web interface of McAfee Network Security Management (NSM) prior to 8.2.7.42.2. The issue is exploitation of session variables, resource IDs and other trusted credentials via reuse of an exposed session token in the application URL. This can allow remote attackers to affe...

6.5CVSS6.4AI score0.00221EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/04/04 1:0 p.m.19 views

CVE-2017-3966 SB10192 - Network Security Management (NSM) - Exploitation of session variables, resource IDs and other trusted credentials vulnerability

Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management NSM before 8.2.7.42.2 allows remote attackers to exploit or harm a user's browser via reusing the exposed session token in the application URL...

6.4CVSS6.5AI score0.00221EPSS
Exploits0References1
Rows per page
Query Builder