Lucene search
K

8006 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.5 views

MiracleLinux 7 : pcs-0.9.143-15.el7 (AXSA:2015-718:02)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2015-718:02 advisory. pcs is a corosync and pacemaker configuration tool. It permits users to easily view, modify and created pacemaker based clusters. Security issues fixed with...

5CVSS6.8AI score0.07778EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/14 6:22 p.m.4 views

CVE-2026-20827

Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface TWINUI Subsystem allows an authorized attacker to disclose information locally...

5.5CVSS6.4AI score0.00633EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/14 12:19 p.m.28 views

CVE-2025-13175 Insecure Password Storage in Y Soft SafeQ 6

Y Soft SafeQ 6 renders the Workflow Connector password field in a way that allows an administrator with UI access to reveal the value using browser developer/inspection tools. The affected customers are only those with a password-protected scan workflow connector. This issue affects Y Soft SafeQ ...

5.1CVSS0.00286EPSS
Exploits0References3
CVE
CVE
added 2026/01/14 12:19 p.m.13 views

CVE-2025-13175

CVE-2025-13175 affects Y Soft SafeQ 6; the issue is the Workflow Connector password field being rendered insecurely, allowing an administrator with UI access to reveal the password via browser developer/inspection tools. Affected versions are before MU106. The impact is exposure of the password f...

5.1CVSS6.6AI score0.00286EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/14 12:19 p.m.3 views

CVE-2025-13175

Y Soft SafeQ 6 renders the Workflow Connector password field in a way that allows an administrator with UI access to reveal the value using browser developer/inspection tools. The affected customers are only those with a password-protected scan workflow connector. This issue affects Y Soft SafeQ ...

5.1CVSS5.5AI score0.00286EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/14 12:0 a.m.4 views

PT-2026-2852

Y Soft SafeQ 6 renders the Workflow Connector password field in a way that allows an administrator with UI access to reveal the value using browser developer/inspection tools. The affected customers are only those with a password-protected scan workflow connector. This issue affects Y Soft SafeQ ...

5.1CVSS6.9AI score0.00286EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/14 12:0 a.m.2 views

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A privilege authentication bypass vulnerability exists...

6.1CVSS5.8AI score0.00078EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-0906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HT...

9.8CVSS5.5AI score0.0027EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.4 views

MiracleLinux 4 : kdelibs3-3.5.10-24.AXS4.1 (AXSA:2012-37:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-37:01 advisory. KDE Libraries included: kdecore KDE core library, kdeui user interface, kfm file manager, khtmlw HTML widget, kio Input/Output, networking, kspell spelling...

4.3CVSS5.5AI score0.01134EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/13 8:4 p.m.3 views

CVE-2025-37173 Improper Input Handling Vulnerability in Authenticated Configuration API Endpoint (AOS-10/AOS-8 Web UI)

An improper input handling vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating systems. Successful exploitation could allow an authenticated malicious actor with valid credentials to trigger unintended behavior on the affected...

7.2CVSS6.3AI score0.00367EPSS
Exploits0References1
CVE
CVE
added 2026/01/13 8:4 p.m.22 views

CVE-2025-37173

The CVE-2025-37173 issue affects Aruba Networks AOS-8 and AOS-10 Web UI/web-based management interfaces. The root cause is improper input handling, leading to multiple vulnerabilities (arbitrary file deletion, stack overflow, and command injection) that an authenticated attacker with valid creden...

7.2CVSS6.3AI score0.00367EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2026/01/13 6:16 p.m.1 views

CVE-2026-20826

Concurrent execution using shared resource with improper synchronization 'race condition' in Tablet Windows User Interface TWINUI Subsystem allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.00295EPSS
Exploits0References1
NVD
NVD
added 2026/01/13 6:16 p.m.10 views

CVE-2026-20826

Concurrent execution using shared resource with improper synchronization 'race condition' in Tablet Windows User Interface TWINUI Subsystem allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00295EPSS
Exploits0References1
OSV
OSV
added 2026/01/13 6:16 p.m.24 views

CVE-2026-20827

Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface TWINUI Subsystem allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00633EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/13 5:56 p.m.19 views

CVE-2026-20827 Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability

...

5.5CVSS0.00633EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/13 5:56 p.m.8 views

CVE-2026-20827

Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface TWINUI Subsystem allows an authorized attacker to disclose information locally...

5.5CVSS5.4AI score0.00633EPSS
Exploits0References2Affected Software16
Vulnrichment
Vulnrichment
added 2026/01/13 5:56 p.m.4 views

CVE-2026-20827 Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability

...

5.5CVSS6.6AI score0.00633EPSS
Exploits0References1
CVE
CVE
added 2026/01/13 5:56 p.m.14 views

CVE-2026-20827

CVE-2026-20827 affects the Tablet Windows User Interface (TWINUI) Subsystem, enabling local disclosure of sensitive information to an attacker with low privileges and no user interaction. The vulnerability is mapped to a local-attack vector with high confidentiality impact (C:H, I:N, A:N) and a C...

5.5CVSS6.1AI score0.00633EPSS
Exploits0References1Affected Software12
Vulnrichment
Vulnrichment
added 2026/01/13 5:56 p.m.4 views

CVE-2026-20826 Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability

...

7.8CVSS6.6AI score0.00295EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2026/01/13 4:0 p.m.7 views

Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Tablet Windows User Interface TWINUI Subsystem allows an authorized attacker to elevate privileges locally...

7.8CVSS7.1AI score0.00295EPSS
Exploits0
Rows per page
Query Builder