Lucene search
+L

167754 matches found

EUVD
EUVD
added yesterday6 views

EUVD-2026-57776

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation...

8.8CVSS5.2AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday15 views

CVE-2026-12263 Authentication Bypass

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation...

8.8CVSS
SaveExploits0References1
NVD
NVD
added yesterday4 views

CVE-2026-59506

CWE-306: Missing Authentication for Critical Function...

9.3CVSS0.00395EPSS
SaveExploits0References1
NVD
NVD
added yesterday7 views

CVE-2026-59500

CWE-287: Improper Authentication...

10CVSS0.00381EPSS
SaveExploits0References1
CVE
CVE
added yesterday20 views

CVE-2026-59506

Technical details are provided only in the Initial Description (CWE-306, CVSS 3.1, CRITICAL) and no connected documents contain further technical specifics for CVE-2026-59506.

9.3CVSS5.2AI score0.00395EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-59506

CWE-306: Missing Authentication for Critical Function...

9.3CVSS5.2AI score0.00395EPSS
SaveExploits0References2
EUVD
EUVD
added yesterday7 views

EUVD-2026-57773

CWE-306: Missing Authentication for Critical Function...

9.3CVSS5.2AI score0.00395EPSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday16 views

CVE-2026-59506 Priority – CWE-306: Missing Authentication for Critical Function

CWE-306: Missing Authentication for Critical Function...

9.3CVSS0.00395EPSS
SaveExploits0References1
Imperva Blog
Imperva Blog
added yesterday5 views

Imperva API Security Token & Authentication Risk Report: Nearly 40% of APIs Face Multiple Authentication Risks

Every year, the security industry publishes benchmark reports built more or less the same way: pick a handful of common vulnerabilities, measure how often they show up, publish the percentages, and move on. We just finished our second year running one of those reports — and the most important thi...

5.7AI score
SaveExploits0
EUVD
EUVD
added yesterday6 views

EUVD-2026-57761

CWE-287: Improper Authentication...

10CVSS5.2AI score0.00381EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-59500

CWE-287: Improper Authentication...

10CVSS5.2AI score0.00381EPSS
SaveExploits0References2
CVE
CVE
added yesterday24 views

CVE-2026-59500

Technical details about CVE-2026-59500 are not publicly available in the provided documents. Monitor for updates from official CVE feeds.

10CVSS5.2AI score0.00381EPSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday15 views

CVE-2026-59500 Priority - CWE-287: Improper Authentication

CWE-287: Improper Authentication...

10CVSS0.00381EPSS
SaveExploits0References1
Wolfi
Wolfi
added yesterday5 views

CVE-2026-50269 vulnerabilities

Vulnerabilities for packages: airflow...

7.5CVSS5.2AI score0.00301EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-19166

A flaw was found in Web Authentication in Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to escape the browser's security sandbox, leading to further system compromi...

9.6CVSS5.3AI score0.00336EPSS
SaveExploits0References5
NVD
NVD
added yesterday5 views

CVE-2026-19088

The ShopEngine Elementor WooCommerce Builder Addon WordPress plugin before 4.9.3 does not protect one of its authentication endpoints against CSRF, allowing an attacker to log a victim into an attacker-controlled account, so that the billing and shipping details the victim then enters at checkout...

5.4CVSS0.00112EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added yesterday8 views

Attackers Exploit SharePoint Authentication Bypass After Public PoC Release

Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept PoC code. The vulnerability in question is CVE-2026-55040 CVSS score: 9.1, which refers to a critical security feature bypass that stems from weak authentication. I...

9.1CVSS9AI score0.0296EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-19088

The ShopEngine Elementor WooCommerce Builder Addon WordPress plugin before 4.9.3 does not protect one of its authentication endpoints against CSRF, allowing an attacker to log a victim into an attacker-controlled account, so that the billing and shipping details the victim then enters at checkout...

5.3AI score0.00112EPSS
SaveExploits0References1
CVE
CVE
added yesterday12 views

CVE-2026-19088

The CVE-2026-19088 affects the ShopEngine Elementor WooCommerce Builder Addon for WordPress (older than 4.9.3). The issue is an CSRF vulnerability on an authentication endpoint, which can allow an attacker to log a victim into an attacker-controlled account. As a consequence, billing and shipping...

5.4CVSS5.3AI score0.00112EPSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday16 views

CVE-2026-19088 ShopEngine < 4.9.3 - Customer PII Disclosure via Forced Authentication

The ShopEngine Elementor WooCommerce Builder Addon WordPress plugin before 4.9.3 does not protect one of its authentication endpoints against CSRF, allowing an attacker to log a victim into an attacker-controlled account, so that the billing and shipping details the victim then enters at checkout...

0.00112EPSS
SaveExploits0References1
Rows per page
Query Builder