Lucene search
+L

167884 matches found

ATTACKERKB
ATTACKERKB
added yesterday1 views

CVE-2026-61979

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

8.1CVSS5.2AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added yesterday2 views

CVE-2026-28185

Unauthenticated Broken Authentication in Log in with Google = 1.4.2 versions...

9.8CVSS5.2AI score
SaveExploits0References2
Cvelist
Cvelist
added yesterday15 views

CVE-2026-28185 WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in Log in with Google = 1.4.2 versions...

9.8CVSS
SaveExploits0References1
CVE
CVE
added yesterday9 views

CVE-2026-28185

The CVE-2026-28185 entry concerns the WordPress plugin “Login with Google” (

9.8CVSS5.2AI score
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-57963

Unauthenticated Broken Authentication in Log in with Google = 1.4.2 versions...

9.8CVSS5.2AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday2 views

CVE-2026-28148

Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...

9.8CVSS5.2AI score
SaveExploits0References2
CVE
CVE
added yesterday14 views

CVE-2026-28148

CVE-2026-28148 affects the WordPress Headless Single Sign On plugin (versions 1.6 and earlier). The vulnerability is an unauthenticated bypass that could allow an attacker to bypass authentication, with CVSS 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base score 9.8, CRITICAL). Connected records do ...

9.8CVSS5.2AI score
SaveExploits0References1
EUVD
EUVD
added yesterday4 views

EUVD-2026-57946

Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...

9.8CVSS5.2AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday21 views

CVE-2026-28008 WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...

9.8CVSS
SaveExploits0References1
CVE
CVE
added yesterday16 views

CVE-2026-28008

CVE-2026-28008 affects the WordPress plugin OAuth Single Sign On – SSO (OAuth Client) for versions ≤ 7.0.0. The vulnerability is described as Unauthenticated Broken Authentication , exposing a high-severity risk with a CVSSv3.1 base score of 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Th...

9.8CVSS5.2AI score
SaveExploits0References1
EUVD
EUVD
added yesterday4 views

EUVD-2026-57944

Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...

9.8CVSS5.2AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday2 views

CVE-2026-28008

Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...

9.8CVSS5.2AI score
SaveExploits0References2
NVD
NVD
added yesterday4 views

CVE-2026-14681

Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pghba.conf rules, via initial direct TLS connection. Despite a pghba.conf that appears to require GSSAPI, the connection may exchange data over TLS encryption alone. If the TLS...

4.2CVSS
SaveExploits0References1
NVD
NVD
added yesterday4 views

CVE-2026-14672

Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This requires the probed user to have a non-default scramiterations count, because the authentication challenge for a...

5.3CVSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday24 views

CVE-2026-14681 PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL

Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pghba.conf rules, via initial direct TLS connection. Despite a pghba.conf that appears to require GSSAPI, the connection may exchange data over TLS encryption alone. If the TLS...

4.2CVSS
SaveExploits0References1
CVE
CVE
added yesterday32 views

CVE-2026-14681

CVE-2026-14681 is a PostgreSQL vulnerability describing improper enforcement of message integrity in GSSAPI support. The issue allows a user to negotiate GSSAPI contrary to pg_hba.conf rules via an initial direct TLS connection, potentially permitting data exchange over TLS even when GSSAPI is re...

4.2CVSS5.3AI score
SaveExploits0References1
Debian CVE
Debian CVE
added yesterday3 views

CVE-2026-14681

Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pghba.conf rules, via initial direct TLS connection. Despite a pghba.conf that appears to require GSSAPI, the connection may exchange data over TLS encryption alone. If the TLS...

4.2CVSS5.3AI score
SaveExploits0
EUVD
EUVD
added yesterday5 views

EUVD-2026-57838

Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This requires the probed user to have a non-default scramiterations count, because the authentication challenge for a...

5.3CVSS5.3AI score
SaveExploits0References1
Debian CVE
Debian CVE
added yesterday1 views

CVE-2026-14672

Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This requires the probed user to have a non-default scramiterations count, because the authentication challenge for a...

5.3CVSS5.4AI score
SaveExploits0
CVE
CVE
added yesterday31 views

CVE-2026-14672

CVE-2026-14672 describes an observable response discrepancy in PostgreSQL SCRAM authentication that can let an unauthenticated user infer the existence of a target user by observing the SCRAM iteration count. The issue requires the probed user to have a non-default scram_iterations value, since a...

5.3CVSS5.3AI score
SaveExploits0References1
Rows per page
Query Builder