Lucene search
K

48 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 2:58 p.m.1 views

CVE-2026-4640

Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain functions to obtain sensitive information...

8.7CVSS5.9AI score0.00118EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 2:58 p.m.2 views

CVE-2026-4639

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS5.8AI score0.00154EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/24 6:31 a.m.1 views

EUVD-2026-14740

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS5.8AI score0.00154EPSS
Exploits0References3
NVD
NVD
added 2026/03/24 5:16 a.m.1 views

CVE-2026-4640

Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain functions to obtain sensitive information...

8.7CVSS0.00118EPSS
Exploits0References2
NVD
NVD
added 2026/03/24 5:16 a.m.1 views

CVE-2026-4639

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS0.00154EPSS
Exploits0References2
CVE
CVE
added 2026/03/24 4:20 a.m.6 views

CVE-2026-4640

The CVE-2026-4640 entry concerns Vitals ESP from Galaxy Software Services, identified in multiple sources (NVD/NIST and CVE List) as a Missing Authentication vulnerability. Unauthenticated remote attackers can access certain functions to obtain sensitive information. Public metrics from TWCERT in...

8.7CVSS5.9AI score0.00118EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/24 4:20 a.m.1 views

CVE-2026-4640 Galaxy Software Services|Vitals ESP - Missing Authentication

Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain functions to obtain sensitive information...

8.7CVSS5.9AI score0.00118EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/24 4:20 a.m.18 views

CVE-2026-4640 Galaxy Software Services|Vitals ESP - Missing Authentication

Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain functions to obtain sensitive information...

8.7CVSS0.00118EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/24 4:17 a.m.1 views

CVE-2026-4639 Galaxy Software Services|Vitals ESP - Incorrect Authorization

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS5.8AI score0.00154EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/24 4:17 a.m.2 views

CVE-2026-4639

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS5.8AI score0.00154EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.4 views

Galaxy Software Services Vitals ESP 安全漏洞

Galaxy Software Services Vitals ESP is an office knowledge management system developed by Galaxy Software Services. There is a security vulnerability in Galaxy Software Services Vitals ESP, which stems from improper authorization. This vulnerability could allow authenticated remote attackers to...

8.8CVSS5.9AI score0.00154EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/24 12:0 a.m.2 views

PT-2026-27329

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS5.8AI score0.00154EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/12/09 8:27 a.m.5 views

CVE-2025-14253

Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

6.9CVSS7.1AI score0.00058EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/09 8:27 a.m.2 views

CVE-2025-14254

Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS8AI score0.0004EPSS
Exploits0References1
OSV
OSV
added 2025/12/08 8:15 a.m.2 views

CVE-2025-14255

Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS6AI score0.0004EPSS
Exploits0References2
NVD
NVD
added 2025/12/08 8:15 a.m.5 views

CVE-2025-14255

Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS0.0004EPSS
Exploits0References2
OSV
OSV
added 2025/12/08 8:15 a.m.3 views

CVE-2025-14254

Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS6AI score0.0004EPSS
Exploits0References2
NVD
NVD
added 2025/12/08 8:15 a.m.2 views

CVE-2025-14253

Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

6.9CVSS0.00058EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/08 7:43 a.m.3 views

EUVD-2025-201695

Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS7.5AI score0.0004EPSS
Exploits0References3
EUVD
EUVD
added 2025/12/08 7:41 a.m.2 views

EUVD-2025-201691

Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS7.5AI score0.0004EPSS
Exploits0References3
Rows per page
Query Builder