Lucene search
+L

102 matches found

Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•17 views

PT-2026-32607

Name of the Vulnerable Software and Affected Versions SINEC NMS versions prior to 4.0 SP3 with UMC Description An authentication weakness exists in the UMC component due to insufficient validation of user identity. This flaw allows an unauthenticated remote attacker to bypass authentication and...

7.3CVSS5.8AI score0.00251EPSS
SaveExploits0References5
ICS
ICS
•added 2026/04/14 12:00 a.m.•28 views

Siemens SINEC NMS

SUMMARY Siemens SINEC NMS when used with User Management Component UMC contains an authentication bypass vulnerability due to insufficient validation of user identity. This could allow an unauthenticated remote attacker to bypass authentication and gain unauthorized access to the application...

7.3CVSS7.2AI score0.00251EPSS
SaveExploits0References10
EUVD
EUVD
•added 2026/03/24 3:30 p.m.•32 views

EUVD-2026-14893

iCMS v8.0.0 contains a Cross-Site Scripting XSS vulnerability in the User Management component, specifically within the index.html file. This allows remote attackers to execute arbitrary web script or HTML via the regip or loginip parameters...

6.1CVSS6.1AI score0.0031EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/03/24 12:00 a.m.•24 views

iCMS 安全漏洞

iCMS is a software application. It is a highly efficient and concise content management system built using PHP and MySQL. The iCMS v8.0.0 version has a security vulnerability, which stems from improper handling of the regip or loginip parameters by the user management component. This may lead to...

6.1CVSS5.6AI score0.0031EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/02/11 1:16 p.m.•15 views

CVE-2026-25656

A vulnerability has been identified in SINEC NMS All versions V4.0 SP3, User Management Component UMC All versions V2.15.2.1. The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially...

8.5CVSS7.6AI score0.00187EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/10 10:15 a.m.•13 views

CVE-2026-25656

A vulnerability has been identified in SINEC NMS All versions, User Management Component UMC All versions V2.15.2.1. The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to...

7.8CVSS6.2AI score0.00187EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/10 10:15 a.m.•23 views

CVE-2026-25656

A vulnerability has been identified in SINEC NMS All versions V4.0 SP3, User Management Component UMC All versions V2.15.2.1. The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially...

8.5CVSS0.00187EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/10 9:58 a.m.•41 views

CVE-2026-25656

A vulnerability has been identified in SINEC NMS All versions V4.0 SP3, User Management Component UMC All versions V2.15.2.1. The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially...

8.5CVSS0.00187EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/10 9:58 a.m.•10 views

CVE-2026-25656

A vulnerability has been identified in SINEC NMS All versions V4.0 SP3, User Management Component UMC All versions V2.15.2.1. The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially...

8.5CVSS7.6AI score0.00187EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/10 9:58 a.m.•41 views

CVE-2026-25656

CVE-2026-25656 affects SINEC NMS User Management Component (UMC) across all versions and all SINEC NMS deployments where UMC is

8.5CVSS7.5AI score0.00187EPSS
SaveExploits0References1Affected Software2
Positive Technologies
Positive Technologies
•added 2026/02/10 12:00 a.m.•32 views

PT-2026-7259

Name of the Vulnerable Software and Affected Versions SINEC NMS versions prior to 2.15.2.1 User Management Component UMC versions prior to 2.15.2.1 Description The application allows unauthorized modification of a configuration file by a user with limited privileges. This could enable an attacker...

8.5CVSS6.2AI score0.00187EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/10 12:00 a.m.•4 views

CVE-2026-25656: Uncontrolled Search Path Element

A vulnerability has been identified in SINEC NMS All versions V4.0 SP3, User Management Component UMC All versions V2.15.2.1. The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially...

8.5CVSS7.5AI score0.00187EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:45 a.m.•26 views

CVE-2025-40795

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SIMATIC PCS neo V6.0 All versions V6.0 SP1 Update 1, User Management Component UMC All versions V2.15.1.3. Affected products contain a stack-based buffer overflow vulnerability in the...

9.8CVSS6.4AI score0.00696EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/01/03 12:00 a.m.•32 views

The vulnerability of the User Management Component (UMC) in the web-based industrial process management system SIMATIC PCS neo allows a attacker to trigger a service failure.

The vulnerability of the User Management Component UMC in the web-based system for managing technological processes of SIMATIC PCS neo is related to the violation of the buffer’s initial limit. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure...

7.8CVSS5.8AI score0.00479EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/10/09 12:00 a.m.•49 views

The vulnerability of the User Management Component (UMC) in the web-based industrial process control system SIMATIC PCS neo allows a attacker to trigger a service failure.

The vulnerability of the User Management Component UMC in the web-based system for managing technological processes of SIMATIC PCS neo is related to the violation of a buffer’s initial limit. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions...

7.8CVSS5.8AI score0.00515EPSS
SaveExploits0References2Affected Software2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-14396

Malicious code in bioql PyPI...

8.7CVSS6.4AI score0.00623EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-27240

Malicious code in bioql PyPI...

9.8CVSS6.4AI score0.00696EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-46224

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.00762EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2025-27237

Malicious code in bioql PyPI...

8.7CVSS6.4AI score0.00515EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-27238

Malicious code in bioql PyPI...

8.7CVSS6.4AI score0.00515EPSS
SaveExploits0References1
Rows per page
Query Builder